In a whole month you could trade up to a nuke with that kind of initiative

It’s ridiculous, every time they abuse the cvss system like this people become less likely to actually address vulnerabilities.

I don’t think anyone will ever exploit this in the wild

I do love this era where C-level execs have somehow become too stupid for PR training though. It’s easy to say that they can do what they want, but in this case, the crap theyve spewed is going to cause serious damage to their brand, ya love to see it.

I.e. delware’s rasion d’etre for decades anyway. A tax haven banana state with no identity beyond being the place people register businesses.

Yeah, in a country with a functional justice system, it sure would.

Yeah - people in here commenting it “doesn’t sound that bad” etc - this is boilerplate for a restructuring/layoffs period, they’re going to fire a ton of people.

It’s a country that thinks a fair federal election is the responsibility of individual states. I don’t care about the history, I don’t care about the importance of “states rights”, it’s untenable. I don’t even consider this an opinion, it’s logical idiocy.

Moved this week. It’s kinda fun rediscovering how communities work. My ID doesn’t belong on the internet, that was the last straw for me.

The usage of PHP in enterprise appliances is actually pretty wild - many firewalls, load balancers etc are using PHP for management plane activities. There is a lot out there outside of userland, and those are the appliances most vulnerable in my opinion. A compromised firewall is worse than a compromised website.

That does sound like a bit of a risk. Similar to how high frequency trading affects stability of shares and elevates risk of mass sell-offs - if these agents had enough use from the general public, they could easily impact the stability of a bank.