← Back to context

Comment by john_strinlai

10 hours ago

wow, okay. yes, that really does look like a "my first PoC" video made by an early teenager. hard to believe that this was produced by a company that wants to be taken seriously.

thanks.

11 comments

john_strinlai

Reply
sippingabonedry  9 hours ago

If anything this is further justification for why these patches need to be kept under wraps.

This industry is full of immature children who cannot keep their mouths shut for 24 hours. They have no clue what massive coordination this requires.

  • yreg  9 hours ago

    These 'immature children' have discovered the exploit, so good luck keeping it under wraps from themselves.

    • numpad0  8 hours ago

      There do seem to be the perpetual problem with the field of computer security that only insufferable and immature kids matter, due to discrete math adjacent nature of computer science, and yet they also legitimately can't be trusted, or does it not... unless LLMs do change everything.

      1 reply →

b112  10 hours ago

I wish people would name this idiotic company, I can't see Twitter here and all people are talking about is a childish video they made. I don't ever want to do business with said company, ever.

They're apparently not trustworthy, and behave as children.

  • Hamuko  9 hours ago

    It's Calif. They're named in the post.

    >As a result of the leak and pre-announcement around 20:00 UTC, Calif, one of the security firms that had reported the issues mistakenly published a video. It showed their proof of concept working against a number of targets and revealed a few additional, though limited, details about the vulnerabilities.

    You can see the same demo video on their site: https://calif.io/php2shell/#php-5-4-0-rce