logoalt Hacker News

progvalyesterday at 8:58 PM5 repliesview on HN

They don't have to publish a working exploit as soon as the embargo is broken, though.


Replies

throw0101cyesterday at 9:24 PM

Perhaps, but if the exploit code is published folks can double-check that they implemented the mitigations properly.

If there's no PoC, how can you really be sure?

j16sdiztoday at 1:16 PM

The third party posted an exploit.

john_strinlaiyesterday at 9:05 PM

anyone who will use the exploit maliciously will immediately and trivially be able to create a working exploit.

staticassertiontoday at 2:29 AM

An exploit was already published.

mike_dyesterday at 9:03 PM

Why not? There has already been a working exploit floating around, at least now it comes from an authoritative source.