Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The post does not include any directly usable exploit code and does not describe command execution vectors. Furthermore information about the bug were published on twitter almost a week ago. But I probably will not convince you about the advantages of Full Disclosure :)


No, I don't see what this adds, I only see how this can cause harm. Anyone who wants to learn more can wait until everyone's had a chance to patch their apps; they can also figure it out themselves.

All this does is allow people who want to do harm to not have to figure it out themselves.


No, another thing it does is help people who support web applcation firewalls and intrusion protection sytems to develop rulesets.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: