← Back to context

Comment by yreg

15 hours ago

Is there any major service that has gone offline? Why is Wikipedia still up, did they manage to mitigate? What about Etsy?

WP sites like whitehouse.gov, TechCrunch, Time?

I don't see anything well known being down.

Wikipedia patched it yesterday for the wiki itself, but most of their other tools are still down right now.

This leaked yesterday in part because so many people had advance notice.

  • You don't seem to understand how this works

    An exploit can only "leak" if it's a private 0day used by APTs.

    When warnings are sent out it has already been a public fact. Keeping some kind of dumbass embargo is just pointless theatre

    • "Windows 11 has a critical vulnerability."

      Boom. A leak. It's now a public fact, so we'll instantly see people exploiting it, right? Except that without a commit or patch fixing it, or even a suggestion of a workaround, you are searching for a needle in a haystack. It could be literally anywhere, after all!

      In fact, it is so well-hidden that I have not even discovered it myself yet. But its presence is a statistical certainty due to the sheer size of the codebase, so we should assume it is somewhere in there. Did I just doom every W11 user, or are perhaps embargoes at least somewhat useful?

      1 reply →

I would hazard a guess that Wordpress VIP and Wikipedia were given advance access to patches? These are the biggest users of PHP after all.