News for hackers. Stuff that matters.

A comment on Zenbleed. Parent comment

Re:Zenbleed by kzrdude on Tuesday July 25, 2023 @07:47AM (#36860914)
Cloudflare blog also mentions javascript https://blog.cloudflare.com/zenbleed-vulnerability/
[ Parent | on HN ]
Re:Zenbleed by loeg on Wednesday July 26, 2023 @09:44AM (#36877586)
Might just be parroting the claim from this thread, though.
[ Parent | on HN ]
Re:Zenbleed by Mahn on Wednesday July 26, 2023 @11:13AM (#36879047)
I would think that Cloudflare is reputable enough that they would not state that claim without at least having some knowledge about it.
[ Parent | on HN ]
Re:Zenbleed by loeg on Wednesday July 26, 2023 @05:05PM (#36885018)
They have since rewritten that sentence from:

> The attack can even be carried out remotely through JavaScript on a website, meaning that the attacker need not have physical access to the computer or server.

https://web.archive.org/web/20230725020052/https://blog.clou...

To:

> Currently the attack can only be executed by an attacker with an ability to execute native code on the affected machine. While there might be a possibility to execute this attack via the browser on the remote machine it hasn’t been yet demonstrated.

https://web.archive.org/web/20230726204030/https://blog.clou...

I think I am vindicated -- they did just make that up, likely from the claim posted here.

[ Parent | on HN ]