logoalt Hacker News

CER10TY • yesterday at 8:55 PM • 2 replies • view on HN

I think people are just latching onto the post that hit the front page earlier today about it being non-trivial to exploit, combined with the fact that there seem to be about a billion PoC out there, most of which don't work.


Replies

tptacek • yesterday at 9:05 PM

Right, that's what's worrying me. It is not interesting that the most widely circulated public POC/demos don't work. All you should care about is the (currently) non-public POCs that do work, of which there are apparently several.

Onavo • yesterday at 9:04 PM

The most direct exploit requires a compromised supply chain which ranks it about as dangerous as your usual dependency exploits.

➕ show 2 replies