Can we stop vibecoding a new website for every next vulnerability we find please? Thank you.
solyin•56m ago
Blame heartbleed for the practice, which long predates ChatGPT and vibecoding. Human psychology is to blame. Only nerds are going to find CVE-2014-0160 triggering, but if I say heartbleed everyone who was there remembers.
autoexec•29m ago
> Only nerds are going to find CVE-2014-0160 triggering, but if I say heartbleed everyone who was there remembers.
That has more to do with the severity of heartbleed than the fact that it had a name and a logo. I've since seen a lot of vulnerabilities try to market themselves with websites, cute names, and stupid logos but I still don't remember them because they still just weren't big enough to actually be memorable.
__m•38m ago
Why? I like the presentation.
MarkBlah•14m ago
agreed, we should all use gopher and block all web traffic, go back to text based systems, use single threaded operating systems and use token ring NIC's
est•52m ago
I remember there was a tel: link than when I clicked it wipes everything on my samsung phone
How could they possibly give this a "won't fix" if it can do what is reported here?
MarkBlah•9m ago
mind boggles, issue is they're swamped with AI slop and high number of findings, they're using AI assistance operated by a 3rd party to handle researcher submissions so many legitimate findings slip through the cracks.
yellow_lead•5m ago
> The attack is remote, needs only the victim's number, and shows them nothing.
err, how can I send an SMS like this? Would a mobile network even accept/forward such an SMS?
0xcrypto•58m ago
solyin•56m ago
autoexec•29m ago
That has more to do with the severity of heartbleed than the fact that it had a name and a logo. I've since seen a lot of vulnerabilities try to market themselves with websites, cute names, and stupid logos but I still don't remember them because they still just weren't big enough to actually be memorable.
__m•38m ago
MarkBlah•14m ago