logoalt Hacker News

apexalpha • today at 1:31 PM • 2 replies • view on HN

A WAF can block known _exploits_ it doesn't prevent the vulnerability from being abused by a new / other / slightly changed exploit.


Replies

bcvvvy • today at 4:20 PM

Also a WAF isn't magical. I remember the whole 8KiB AWS WAF bypass thing.

esseph • today at 1:47 PM

You also just described system patching.