← Back to context

Comment by solyin

11 hours ago

Blame heartbleed for the practice, which long predates ChatGPT and vibecoding. Human psychology is to blame. Only nerds are going to find CVE-2014-0160 triggering, but if I say heartbleed everyone who was there remembers.

> Only nerds are going to find CVE-2014-0160 triggering, but if I say heartbleed everyone who was there remembers.

That has more to do with the severity of heartbleed than the fact that it had a name and a logo. I've since seen a lot of vulnerabilities try to market themselves with websites, cute names, and stupid logos but I still don't remember them because they still just weren't big enough to actually be memorable.

  • yes, the other day I remembered "that dirty page bug with AF_ALG" and apparently it's got a name, but I could've found its CVE number just as well