2,420 karma · joined February 3, 2021
It's infantilizing to think it's harmful to give users control over their privacy because they are too stupid to understand what they are doing when they share their data with someone that it shares their personal data with someone.
It is punishing Apple for building too great of a product.
If you are warning people to turn off their servers. You might as well give them a patch at the same time.
>I'm some rando so no one's even heard of me
Why do think people need to have heard of you. If you are reporting this issue directly to distro maintainers, security companies, hosting companies, etc first you can help use their names as part of the marketing push to raise awareness.
Trying to say that uncordinated disclosure is bad because people might get hacked yesterday instead of today just is not a convincing argument to me. I prefer the solution that results in the minimum amount of downtime for sites and sites provide value to society.
Mitigating a bug and developing a proper solution that is maintainable long term and supports future changes being made to the software take different amounts of time to develop.
>This disregarded weeks of work by many parties toward a coordinated disclosure.
Good. Coordinated disclosure meant that people couldn't protect themselves. That's not a good thing. It meant sites were forced to shut down instead of simply updating.
What everyone is looking for.
At least this time we can have LLMs rediscover it and make patches ourselves.
Here is the patch I had an LLM come up with against master: https://pastebin.com/raw/EUCF0SR0 It at least stops the PoC which is better than nothing.
The algorithm is open source and does not include logic for down ranking external links.
Also since the model is open source you wouldn't need to go through procurement to obtain it anyways.
Again, hosting providers eventually get RCE by being able to send whatever bash commands they want to run on the machine running the agent. It is very important who you give this power to.