Post

"Why was one of the most severe threats to the foundation of the internet left unresolved for 22 years? Because it would have taken mind-numbing work for a human to figure out how to take advantage of it," writes CNN's David Goldman. | Analysis https://cnn.it/4zQUuUK

18 reposts70 likes

So humans knew about the flaw 22 years ago but did nothing to correct it. There has to be a reason for that. Was it a deliberate act to leave a gate open? If so who would benefit from such act?

No they did not. The vulnerability was in fact unknown, or rather, it went unseen. You forget that the involved code was and is open source. Everyone with the appropriate skills could have found it. There is no way that it could have been deliberately hidden.

In July 2004, security researcher Stefan Esser sent a warning. A critical flaw in PHP, the programming language that powers 70% of the world’s websites, could allow an attacker to do some seriously nefarious stuff: read passwords, steal databases or even take over entire websites.

It is naive and dangerous to hope that malicious actors will overlook a security vulnerability simply because AI fails to detect it. This line of reasoning highlights the real problem: there are too many people out there who have little to no understanding of the issue.