Hacker News

points by paxy 13 hours ago | 0 comments

Now let’s watch the goalposts shift in real time about how severe this vulnerability is.

[–] ofjcihen 13 hours ago

Most goalposts I’ve seen say “bad but clumsy”.

Believe it or not in cybersecurity there are many considerations in how “bad” a vulnerability is.

[–] tptacek 10 hours ago

Practioners are pretty well settled on how big a deal platform-wide RCE is.

[–] ofjcihen 9 hours ago

They are, and again, believe it or not, more goes into it than “RCE bad”.

Ease of exploitation, feasibility do play a part which I’m sure surprises you.

[–] tptacek 7 hours ago

Not in the sense that people downplaying this vulnerability meant.

[–] ofjcihen 7 hours ago

What does that even mean?

[–] tptacek 6 hours ago

I'd be happy to answer that question if you posed it straight, rather than as a an attempted dunk. Of course, the search bar on this thread will lead you to plenty of additional conversation about the vulnerability and the attempts to downplay it.

[–] ofjcihen 6 hours ago

Seriously? You replied to what I said with no follow up and a hazy premise and now you want me to take your leash and lead you through your own argument?

You have to be the single worst HN celebrity.

[–] sudo_intellect 5 hours ago

Since you're intent on being obtuse, here's an example of a thread of HN downplaying the severity of this last week.

https://news.ycombinator.com/item?id=50189820

You actually participated in it and called cyber security researchers addicted to likes. Ironic.

[–] ghjkghjkghj 5 hours ago

how does this have anything to do with the original post?

also, psuedo cybersecurity researchers are definitely addicted to likes.

edited: looks like half of that post even agrees with them so i mean...?

[–] pixl97 11 hours ago

With all that said, how exploit chaining is working these days I think most peoples considerations are not weighted toward bad enough.