2026-06-29 17:55 UTC
@pgl@infosec.exchange
@jayjacobs@infosec.exchange
Noob question:
Does C have to include at least one attacker-controlled condition, to exclude things like (hypothetical) "restarting the database engine (S) during a leap second (C) causes a race condition (f) which results in all data files being overwritten with zeros (F)" ?
Replies (1)
-
@tknarr@mstdn.social 2026-06-29 18:19
@wolf480pl@mstdn.io @pgl@infosec.exchange @jayjacobs@infosec.exchange I believe so. The definition defined C as "attacker or environmental" conditions.