News for hackers. Stuff that matters.

A comment on Drupal Core – Highly Critical Public Service announcement. Parent comment

Re:Drupal Core – Highly Critical Public Service announcement by Mandatum on Wednesday October 29, 2014 @05:24PM (#8530076)
It's like Exploit Wednesday for Windows, except Drupal is a lot easier to reverse and find where the security issues lie given it's open-source.. So instead of taking a day to reverse/find holes, it takes a matter of minutes.
[ Parent | on HN ]
Re:Drupal Core – Highly Critical Public Service announcement by TacticalMalice on Wednesday October 29, 2014 @05:32PM (#8530118)
In addition, the issue was leaked pre-announcement among a great many parties who had time to prepare.
[ Parent | on HN ]
Re:Drupal Core – Highly Critical Public Service announcement by Mandatum on Sunday November 02, 2014 @10:07PM (#8549174)
Do you have more detail on that? I'd hazard a guess at irresponsible disclosure, or an internal Drupal employee leak.
[ Parent | on HN ]