VirtualBox E1000 Guest-to-Host Escape

Re:VirtualBox E1000 Guest-to-Host Escape by metildaa on Wednesday November 07, 2018 @12:32AM (#18397282)

Not at the cost of leaving end users vulnerable and in the dark, vendors can deal with the consequences of their choices.

Hard lessons are needed, having attempted to disclose serious vulnerabilities in T-Mobile USA's APIs by reaching out repeatedly, most vendors will not patch in an urgent manner, and some (like T-Mobile) are content to leak customer info indefinitely.

It is a culture problem, and it will take (financial and reputational) pain to alter the existing corporate cultures.

[ Parent | on HN ]

Re:VirtualBox E1000 Guest-to-Host Escape by matt4077 on Wednesday November 07, 2018 @05:17AM (#18398209)

So... It's okay to harm third parties, i. e. VirtualBox users, not just as an unfortunate but unavoidable side effect, but as your means to punish the vendor for their (neglient? wilful? morally depraved?) failure to follow the idealised processes you envision, and for not honouring your genius with whatever your ego believes it is owed?

[ Parent | on HN ]

Re:VirtualBox E1000 Guest-to-Host Escape by Piskvorrr on Wednesday November 07, 2018 @07:28AM (#18398663)

The harm is already there, you're just shooting the messenger.

[ Parent | on HN ]