News for hackers. Stuff that matters.
Re:Serious Chrome zero-day by uniformlyrandom on Wednesday March 06, 2019 @04:13PM (#19322843)
This blog post is so watered down and manages to digress at every possible point that it is almost impossible to read. The only useful part of the text are the URLs.

Also, this:

> A vulnerability, or vuln for short, is a bug that makes software go wrong in a way that reduces computer security.

Does anyone actually use this abbreviation?

Re:Serious Chrome zero-day by excalibur on Wednesday March 06, 2019 @04:22PM (#19322921)
> This blog post is so watered down and manages to digress at every possible point that it is almost impossible to read.

Its target audience appears to be ten-year-olds, yet it's inexplicably devoid of memes.

Re:Serious Chrome zero-day by notatoad on Wednesday March 06, 2019 @04:53PM (#19323253)
the target audience is managers and bookkeepers who see the sophos invoice every month but have no idea what they do.

here is the blog post in meme form, for your convenience: https://memegenerator.net/img/instances/67508702/look-at-me-...

Re:Serious Chrome zero-day by munchbunny on Wednesday March 06, 2019 @04:24PM (#19322951)
I do in team chat. It's obvious enough in context, as in "hey can you deploy, I just patched this urgent vuln: [url to ticket]"

You won't see me using it in an email or other long form writing though.

Re:Serious Chrome zero-day by uniformlyrandom on Wednesday March 06, 2019 @04:28PM (#19323001)
Yep, chat makes sense. Thank you for actually stating a use-case.
[dead]
Re:Serious Chrome zero-day by munk-a on Wednesday March 06, 2019 @05:32PM (#19323607)
> Next time u c a shrt'd wrd u cn just ass. it's useful. B/c they r.

They aren't always useful but I've rewritten your sentence in what I would consider a minimally legible format for me... but that's the problem it's for me. Don't introduce jargon in an effort to reduce comprehension time, it almost never works if you consider the time to familiarize yourself with the jargon. So when you're writing a blog post about PHP feel free to sprinkle in some comments about var vars, when you're communicating with your team use all your internal jargon... but when publishing an article for wide consumption just write everything out clearly.

Re:Serious Chrome zero-day by warent on Wednesday March 06, 2019 @05:09PM (#19323400)
4 sr i dt ths T

(for some reason I doubt that's true)

Re:Serious Chrome zero-day by deoxxa on Wednesday March 06, 2019 @05:20PM (#19323506)
I read this as "for sure I do this too"
Re:Serious Chrome zero-day by uniformlyrandom on Wednesday March 06, 2019 @04:59PM (#19323317)
Not really, I have seen a lot of unneeded abbreviations. Thankfully we are (almost) out of the age of 140c messages and 40c editor lines.

But more to the point, 'vulns' seems like a very unnatural abbreviation. I would go with v11n (similar to i18n).

Re:Serious Chrome zero-day by reificator on Wednesday March 06, 2019 @05:12PM (#19323417)
> But more to the point, 'vulns' seems like a very unnatural abbreviation. I would go with v11n (similar to i18n).

Please no. I really don't like that convention and would rather you just type out the whole word if that's the alternative. Worse yet, for some reason you've decided to end in `n` rather than `y`.

How can you dismiss the first four letters as an "unnatural" abbreviation, and then suggest inserting digits to represent the number of characters removed as an alternative? I'm not following that logic at all.

Re:Serious Chrome zero-day by munk-a on Wednesday March 06, 2019 @05:26PM (#19323555)
Oh please _please_ don't. i18n is a terribly obscure term with no implicit link to the actual word. This is a place where "naming things is hard" but for big concept chose short concise terminology while letting the details get lost in the verbose verbiage. Whenever I see i18n I just weep over the fact they didn't use the term "lang", internationalization is complicated and hard to shorten due to other meaningful jargon around it but there are better options than the dumpster fire which is i18n.
Re:Serious Chrome zero-day by amake on Wednesday March 06, 2019 @07:25PM (#19324470)
> Whenever I see i18n I just weep over the fact they didn't use the term "lang"

That's a bad idea because "lang" or "language" is already dangerously overloaded. People casually use it to mean any of (actual) language, locale (language + region (+ script, maybe)), script, or any combination of the above.

Re:Serious Chrome zero-day by JeremyBanks on Wednesday March 06, 2019 @05:14PM (#19323442)
Terms like i18n and l10n are bad for a11y.
Re:Serious Chrome zero-day by reificator on Wednesday March 06, 2019 @05:16PM (#19323460)
> Terms like i18n and l10n are bad for a11y.

Thank you for that, I am definitely stealing that phrasing.

Re:Serious Chrome zero-day by warent on Wednesday March 06, 2019 @05:07PM (#19323391)
v11n meaning vulnerabilitn presumably ;)
Re:Serious Chrome zero-day by NyxWulf on Wednesday March 06, 2019 @05:22PM (#19323517)
I was picturing villain with an implied evil laughter.
Re:Serious Chrome zero-day by benatkin on Wednesday March 06, 2019 @05:16PM (#19323462)
Until now you apparently haven't been keeping a busy person typing in chat into account. Now you can. This use case isn't unique to the vuln/vulnerability abbreviation, but plenty of others. Including confusing ones like "i left you a vm" (virtual machine? where?).
Re:Serious Chrome zero-day by lucb1e on Thursday March 07, 2019 @02:53AM (#19326302)
As a security consultant, sure we do. But I'd never use it in a customer report or company blog post if I felt I needed to explain the abbreviation.
Re:Serious Chrome zero-day by bsamuels on Wednesday March 06, 2019 @05:06PM (#19323379)
"vuln" is pretty commonly used in the security industry
Re:Serious Chrome zero-day by blattimwind on Wednesday March 06, 2019 @04:31PM (#19323029)
> Does anyone actually use this abbreviation?

More common in plural (vulns). However, it sounds oddly vulgar in my ears.

Re:Serious Chrome zero-day by DC-3 on Wednesday March 06, 2019 @04:35PM (#19323077)
It's weird because when you read vulnerability (or at least when I say it) the first phoneme effectively becomes 'vun' - but in the abbreviated form one feels the need to mentally enunciate the 'l'.
Re:Serious Chrome zero-day by qu4z-2 on Wednesday March 06, 2019 @05:48PM (#19323764)
I think the dropped l might just be your locale. I certainly pronounce it in the full word.
Re:Serious Chrome zero-day by hopler on Wednesday March 06, 2019 @05:15PM (#19323445)
It's because vul-ner-a-bil-i-ty is being chopped in the middle of a syllable "ner",

"Vulner" is more pleasant than "vuln"

Re:Serious Chrome zero-day by uniformlyrandom on Wednesday March 06, 2019 @04:54PM (#19323260)
> oddly vulgar

My initial reaction was 'linguistically disgusting', but I decided to hold off the opinion, just in case I am strangely illiterate.

Re:Serious Chrome zero-day by diminoten on Wednesday March 06, 2019 @04:36PM (#19323094)
I've typed it, but I dunno if I've ever said it out loud. Kind of like i18n.
Re:Serious Chrome zero-day by __jal on Wednesday March 06, 2019 @05:00PM (#19323326)
Same here. It is used internally here as a written abbreviation, and we use it as a prefix in a numbering scheme to identify a certain category of defects, but I don't think I've ever heard anyone use it verbally.
Re:Serious Chrome zero-day by saagarjha on Wednesday March 06, 2019 @04:20PM (#19322906)
I have heard it used.
Re:Serious Chrome zero-day by kerng on Wednesday March 06, 2019 @05:37PM (#19323643)
Vuln is a common abbreviation in the security space - although, I dont appreciate parts of the sentence structure and how things are written in the article in general. Its difficult to read.
Re:Serious Chrome zero-day by bezosbaldballs on Wednesday March 06, 2019 @04:36PM (#19323085)
u r n0t 1337 h4xx0r

This sounds like it was written by the same guy who started the "Hacker known as 4Chan" meme

Re:Serious Chrome zero-day by JakeWesorick on Wednesday March 06, 2019 @04:21PM (#19322912)
I uz vuln evry day n sware dev.
Re:Serious Chrome zero-day by kevin_thibedeau on Wednesday March 06, 2019 @05:15PM (#19323449)
Zerocool and Neo do.
Re:Serious Chrome zero-day by ecesena on Wednesday March 06, 2019 @11:43PM (#19325558)
no, I want to abbr I use v, and a for att.
Re:Serious Chrome zero-day by sjg007 on Wednesday March 06, 2019 @04:52PM (#19323243)
Totes.