The emSign was bad, but not super critical. It created a lot of problems with trust and could lead to some MitM attacks. But, it was something that didn't need to be fixed now, Now, NOW!. The PHP stuff, on the other hand, that was an absolute "oh, fuck!" revelation. So much of the web still runs on PHP. WordPress is still common. And PHP shows up in lots of fun places, like PAN-OS. So, it's one of those things that really does need to be fixed NAO!.
Of course, I have little doubt this will be ignored by a lot of places and we're going to see botnets expanding rapidly.
7 replies
bad week to be an internet, huh?
But captain... its only Wednesday, my dudes.
And not even a long weekend right?
Second? How many of them in total?
4
The emSign was bad, but not super critical. It created a lot of problems with trust and could lead to some MitM attacks. But, it was something that didn't need to be fixed now, Now, NOW!. The PHP stuff, on the other hand, that was an absolute "oh, fuck!" revelation. So much of the web still runs on PHP. WordPress is still common. And PHP shows up in lots of fun places, like PAN-OS. So, it's one of those things that really does need to be fixed NAO!.
Of course, I have little doubt this will be ignored by a lot of places and we're going to see botnets expanding rapidly.
The news cycle can't handle this much.