Alnarra the Druid Cat

when they say secure, they mean secure for 4 seconds

Ok so We do have a for sure, certified vulnerability, that if ASLR if off should work like a charm, but ASLR has been a standard for 20 years, so this is unreliable at best yes? Cloudflares boasting they've implemented defenses, against what exactly?

Like with the netscaler vulnerability, I knew literally within an hour of Citrix's patch what the actual POC would look like in network logs. It's been nearly 14 hours since PHP's patch dropped and I still can't for the life of me find examples of what this looks like.

Ok so We do have a for sure, certified vulnerability, that if ASLR if off should work like a charm, but ASLR has been a standard for 20 years, so this is unreliable at best yes? Cloudflares boasting they've implemented defenses, against what exactly?

Like with shit like this I expect Query Strings, I expect sample POST headers, something that makes it clear what data is actually being passed to a PHP based webserver to get the OOM exploit working. All I've seen is terminal screens with a .py script they can't show returning a UID for php.

Ok so We do have a for sure, certified vulnerability, that if ASLR if off should work like a charm, but ASLR has been a standard for 20 years, so this is unreliable at best yes? Cloudflares boasting they've implemented defenses, against what exactly?

And like I know part of this is our great Security Theater where we hide stuff for a little bit but like I had a pretty cognizant query string for log4j within an hour. I've seen nothing that isn't vibe coded slop for this.

Ok so We do have a for sure, certified vulnerability, that if ASLR if off should work like a charm, but ASLR has been a standard for 20 years, so this is unreliable at best yes? Cloudflares boasting they've implemented defenses, against what exactly?

We know /someone/ has the real POC exploit that does actually work, quite a few someone, but I can not for the life of me find any actual details of what that exploit looks like. Watchtower / Cloudflare claim they're seeing it. but is that actually the exploit?

I'm bemused Soylent appears to have forgotten the purpose of Soylent in the push to have more Sugar Free Protein Heavy health drinks.

It's so depressing watching the second order effects of all the god awful policy decisions Regan Republicans in the 80's made now almost 40 years later coming home to roost. It really can not be understated how damaging the replacement of countless progressive legislators during 1980 was to the US.

Well that’s fascinating, Reddit is set to auto remove comments with “Yandex.ru” in them. It wasn’t a mod, it was straight up Reddit

The real threat isn't the hyper fuzzer 9000 finding vulnerabilities, it's going to be the Decomplile and recompile 9000 bot basically meaning that you don't need to break in and steal source code anymore to start hunting for vulnerabilities.

It is funny watching software companies get hoisted by their own petard as various models are being used to decompile their code bases to source and watch as the people doing it go "nuh uh isn't stealing! it's 'creatively recreating!'" Like did you think the thievery would stop at books and art?

My frustration with tinkerer is we've had tinkerer since vanilla, engineering just sucks because they're afraid of making it a Meta Required profession again

AI is alive in the same way my fake olive tree is a plant It’s designed to look like something and if you aren’t being to discerning you’d be like “oh an olive tree” but under scrutiny you would realize it isn’t in fact a plant AI is an algorithm that spits out books and Reddit comments