Re:“Why are you releasing a full exploit just minutes after ...
by Titanous on Friday July 24, 2015 @05:59PM
(#9945452)
No PoC was released with the Heartbleed disclosure, but many were published within hours by others (including myself). And this was a good thing, without them admins would be unable to verify that their servers were patched successfully.
[ Parent
| on HN ]
Re:“Why are you releasing a full exploit just minutes after ...
by zorked on Friday July 24, 2015 @06:11PM
(#9945514)
At a company where I worked previously one team only noticed one of their systems hadn't been correctly patched against Heartbleed because there was an exploit available that they could use to test.
Who knows what would have happened days/weeks/months later if that hadn't been the case.