Hacker News

points by ofjcihen 13 hours ago | 0 comments

Most goalposts I’ve seen say “bad but clumsy”.

Believe it or not in cybersecurity there are many considerations in how “bad” a vulnerability is.

[–] tptacek 10 hours ago

Practioners are pretty well settled on how big a deal platform-wide RCE is.

[–] ofjcihen 9 hours ago

They are, and again, believe it or not, more goes into it than “RCE bad”.

Ease of exploitation, feasibility do play a part which I’m sure surprises you.

[–] tptacek 7 hours ago

Not in the sense that people downplaying this vulnerability meant.

[–] ofjcihen 7 hours ago

What does that even mean?

[–] tptacek 6 hours ago

I'd be happy to answer that question if you posed it straight, rather than as a an attempted dunk. Of course, the search bar on this thread will lead you to plenty of additional conversation about the vulnerability and the attempts to downplay it.

[–] ofjcihen 6 hours ago

Seriously? You replied to what I said with no follow up and a hazy premise and now you want me to take your leash and lead you through your own argument?

You have to be the single worst HN celebrity.

[–] Dylan16807 5 hours ago

> Believe it or not

> which I’m sure surprises you

You caused the problem here. You started off being hazy and rude.

"Say that again without trying to dunk on anyone if you want me to put effort into responding." seems like a pretty reasonable trade.

[–] sudo_intellect 5 hours ago

Since you're intent on being obtuse, here's an example of a thread of HN downplaying the severity of this last week.

https://news.ycombinator.com/item?id=50189820

You actually participated in it and called cyber security researchers addicted to likes. Ironic.

[–] ghjkghjkghj 5 hours ago

how does this have anything to do with the original post?

also, psuedo cybersecurity researchers are definitely addicted to likes.

edited: looks like half of that post even agrees with them so i mean...?

[–] pixl97 11 hours ago

With all that said, how exploit chaining is working these days I think most peoples considerations are not weighted toward bad enough.