News for hackers. Stuff that matters.
Re:Zero-Day Exploitation of Atlassian Confluence by JohnJamesRambo on Friday June 03, 2022 @08:33AM (#31607361)
This is really neat and novel to me, thanks for sharing.
Re:Zero-Day Exploitation of Atlassian Confluence by bombcar on Friday June 03, 2022 @09:16AM (#31607795)
The IT version of it is sometimes called "defense in depth" - even if each individual layer has weaknesses, combining them gets something stronger.

This often doesn't apply in cryptography; where adding two separate functions may result in a system that is actually weaker to attack.

Re:Zero-Day Exploitation of Atlassian Confluence by rob74 on Friday June 03, 2022 @11:09AM (#31609351)
Well yeah, if you put two slices of Swiss cheese side by side instead of on top of each other, you have given the attacker a wider choice of holes...