alt Hacker NewsFrom the example alone it's hard to say that a postmortem would be useful from a technical perspective. It could be context poisoning by an adversarial user, memory corruption etc.
From the example alone it's hard to say that a postmortem would be useful from a technical perspective. It could be context poisoning by an adversarial user, memory corruption etc.
It's useful from a disclosure and trust perspective.
If I remember correctly, it was in fact possible to manually inject chat context at the time, which would have made spoofing something like this completely possible.
But the silence on it is very frustrating.