Comment by paxy 5 hours ago Now let’s watch the goalposts shift in real time about how severe this vulnerability is. 4 comments paxy Reply ofjcihen 5 hours ago Most goalposts I’ve seen say “bad but clumsy”.Believe it or not in cybersecurity there are many considerations in how “bad” a vulnerability is. tptacek 1 hour ago Practioners are pretty well settled on how big a deal platform-wide RCE is. ofjcihen 31 minutes ago They are, and again, believe it or not, more goes into it than “RCE bad”.Ease of exploitation, feasibility do play a part which I’m sure surprises you. pixl97 3 hours ago With all that said, how exploit chaining is working these days I think most peoples considerations are not weighted toward bad enough.
ofjcihen 5 hours ago Most goalposts I’ve seen say “bad but clumsy”.Believe it or not in cybersecurity there are many considerations in how “bad” a vulnerability is. tptacek 1 hour ago Practioners are pretty well settled on how big a deal platform-wide RCE is. ofjcihen 31 minutes ago They are, and again, believe it or not, more goes into it than “RCE bad”.Ease of exploitation, feasibility do play a part which I’m sure surprises you. pixl97 3 hours ago With all that said, how exploit chaining is working these days I think most peoples considerations are not weighted toward bad enough.
tptacek 1 hour ago Practioners are pretty well settled on how big a deal platform-wide RCE is. ofjcihen 31 minutes ago They are, and again, believe it or not, more goes into it than “RCE bad”.Ease of exploitation, feasibility do play a part which I’m sure surprises you.
ofjcihen 31 minutes ago They are, and again, believe it or not, more goes into it than “RCE bad”.Ease of exploitation, feasibility do play a part which I’m sure surprises you.
pixl97 3 hours ago With all that said, how exploit chaining is working these days I think most peoples considerations are not weighted toward bad enough.
Most goalposts I’ve seen say “bad but clumsy”.
Believe it or not in cybersecurity there are many considerations in how “bad” a vulnerability is.
Practioners are pretty well settled on how big a deal platform-wide RCE is.
They are, and again, believe it or not, more goes into it than “RCE bad”.
Ease of exploitation, feasibility do play a part which I’m sure surprises you.
With all that said, how exploit chaining is working these days I think most peoples considerations are not weighted toward bad enough.