Comment by illusive4080
17 hours ago
Why do critical vulnerabilities get a cutesy name and website nowadays? Who’s paying for these sites?
17 hours ago
Why do critical vulnerabilities get a cutesy name and website nowadays? Who’s paying for these sites?
Small static websites are effectively free (Cloudflare, GCP free tier, etc)..
Domains aren’t
Sure, but domains aren't going to be more than $10 or $20 for the year they're relevant.
1 reply →
Sure they are. The domain you want isn't.
GitHub.io domains, workers.dev domains, etc are all free domains.
Clever use and abuse of some startups can get you a free domain with a signup package that you can subsequently transfer out, but those are harder to find these days.
Seriously, the bad guys figure this out all the time.
This has been the case for more than a decade, Heartbleed was probably the one which really created the trend.
I'm certainly not complaining about some selfless guy making a helpful website without expecting anything in return!
They excpect fame and may make things look worse than they are
How, exactly, are they making "things look worse than they are"? By.... showing what the issue is?
1 reply →
No, they aren't. The website doesn't list an author, so fame is out of the question, and they say exactly how severe the bug is rated ("Rated 9.2 Critical (CVSS 4.0) by GitHub, High by Node.js.") right at the top.
1 reply →
Are you asking why do we name things? In a programming forum?
Listen. There are TWO problems, okay‽
It is annoying (and ironic) because larger companies, that will benefit from this information the most, blocks newly registered domains.