Comment by pimterry
21 hours ago
Much prefer the Broccoli2Shell name & site (for the same vuln): https://broccoli2shell.com/. For starters, I'm pretty sure you can hit this without HTTP if you do any manual Brotli decoding, HTTP just happens to be the most common case that comes up.
Why do critical vulnerabilities get a cutesy name and website nowadays? Who’s paying for these sites?
Small static websites are effectively free (Cloudflare, GCP free tier, etc)..
Domains aren’t
3 replies →
This has been the case for more than a decade, Heartbleed was probably the one which really created the trend.
I'm certainly not complaining about some selfless guy making a helpful website without expecting anything in return!
They excpect fame and may make things look worse than they are
4 replies →
Are you asking why do we name things? In a programming forum?
Listen. There are TWO problems, okay‽
It is annoying (and ironic) because larger companies, that will benefit from this information the most, blocks newly registered domains.