6 months agoagbert1968
It’s nice that you are dramatic and all. But if it is your intent to reach IT professionals, then please get to the point quickly. 🙌
6 months agopoppinfoxes
i like how you dont explain anything about the vulnerability. waste of breath
6 months agotrimethy
Yes, vulnerabilities can lead to an exploit … but … The thread level/impact depends on the conditions required for successful exploitation, target, scope of impact … In short, the impact of the exploit is context dependent. The rating gives you an idea about the vulnerability, not the impact of the exploit or how vulnerable you are. In order to assess the true impact, one has to understand the exploit and the use case. The methods used for establishing and verifying trust in the current SSL architecture is inherently flawed, It’s not the first vulnerability in its class (MITM) and won’t be the last! Imho Risk = CVE + CWE There are solutions … The question is why don’t we implement them? It’s usually being constrained by lack of understanding and correct assessment of its economical cost/value. Some food for thought: https://en.wikipedia.org/wiki/Convergence_(SSL)
6 months agomeglifewanderful
We failed in cryptographic validation and IP management. Roots that shouldnt be trusted are. Trust bypass is our biggest flaw. Id argue all pi devices, though not an owner or am seeking to have them gone, can connect to all mac ids. This is beyond theory.
6 months agotrimethy
Weakness Enumeration: CWE-295: Improper Certificate Validation. https://cwe.mitre.org/data/definitions/295.html Nothing to see, please move along now.
More posts
