News for hackers. Stuff that matters.

A comment on Chrome zero-day released on GitHub – fixed on V8 but still works on latest.

Re:Chrome zero-day released on GitHub – fixed on V8 but stil... by titzer on Monday April 12, 2021 @10:11PM (#26787446)
This is so irresponsible to disclose vulnerabilities this way. There is a process that many people have worked hard to create whereby vulnerabilities can be disclosed, patched--you can even be rewarded!--and both fix and bug are eventually made public in proper time.

I am just smh over this.

[ Parent | on HN ]
Re:Chrome zero-day released on GitHub – fixed on V8 but stil... by jacquesm on Monday April 12, 2021 @10:51PM (#26787651)
You can't assume good faith on the part of your attacker in building your threat model.

Also: it could have been much worse than this irresponsible disclosure, at least it was disclosed.

[ Parent | on HN ]
Re:Chrome zero-day released on GitHub – fixed on V8 but stil... by adr_ on Monday April 12, 2021 @11:47PM (#26787937)
I think Google already publicly disclosed the code to trigger this vulnerability: https://chromium.googlesource.com/v8/v8/+/fd29e246f65a7cee13...
[ Parent | on HN ]