News for hackers. Stuff that matters.

A comment on Cryptopathic: The situation at LastPass may be worse than they are letting on. Parent comment

Re:Cryptopathic: The situation at LastPass may be worse than... by dmix on Saturday December 24, 2022 @10:11AM (#34117490)
To explain your comment a bit: It should be 0 day AND a rootkit, not OR. Plus the rootkit is not always needed or possible.

Also the people talking about “burning zero days”… every time you use an exploit (ignoring the exact meaning of 0 days) it doesn’t become burned by the first person. The hacker could use it on hundreds of people before it’s discovered and patched by whatever software it targets. That could take months.

[ Parent | on HN ]
Re:Cryptopathic: The situation at LastPass may be worse than... by justsomeadvice0 on Saturday December 24, 2022 @12:41PM (#34119071)
It can certainly be "or": rootkits can come from your machine's supply chain, and lie mostly dormant for many months or years before activation.
[ Parent | on HN ]