Post #2604727
2026-05-10 22:08 UTC
@rene_mobile@infosec.exchange I thought I read that dirtyfrag was originally disclosed responsibly, with a delay before publication, but someone else leaked it, so the discoverer had to publish so that people would know. What I read said that was pretty much standard procedure. Is there some article that’s saying this wasn’t the case?
Replies (1)
-
@rene_mobile@infosec.exchange 2026-05-10 22:15
@rayk@techhub.social Leaking the bug (potentially to some limited list) is still not the same as leaking the full exploit and making a lot of noise about it. Even it the exploit can be recreated, why make it so easy for everybody to exploit it immediately? Sure, there's always lots of gray in the spectrum of coordinated disclosure. But from what I can see, they didn't seem to try very hard to help people get their systems into a safer state. The bug release page first and foremost points out how easy the exploit it and on how many distributions it works. This is showing off, and not making systems more secure. Yeah, I am not amused.