Re:RCE in Visual Studio Code's Remote WSL for Fun and Negati...
by rfoo on Tuesday December 21, 2021 @07:22AM
(#29636671)
Fortunately, demand for such bugs is pretty low ^, so, $1~2k I guess.
^ this is both a good and a sad indicator, it means the bar of post-exploitation for such a bug (on developers' boxes) is "sufficiently high" that your favorite ransomware gangs are not eager to get on. OTOH it means they have way more "easier" enterprise-y targets...
^ this is both a good and a sad indicator, it means the bar of post-exploitation for such a bug (on developers' boxes) is "sufficiently high" that your favorite ransomware gangs are not eager to get on. OTOH it means they have way more "easier" enterprise-y targets...