β² 1596 βΌ Backdoors (lemmy.ml) submitted 2 years ago by lemmyreader@lemmy.ml to c/linuxmemes@lemmy.world 115 comments fedilink hide all child comments https://wetdry.world/@cyrus/112186279067271067
[β] squaresinger@feddit.de 3 points 2 years ago (1 child) If the vulnerability is in the wild, what other security mechanisms do you have until it's patched? permalink fedilink source parent hideshow 2 child comments replies: [β] oce@jlai.lu 4 points 2 years ago* In this case, downgrading to the not affected version. If there's no possible downgrade, stopping the compromised system until it is fixed. Keeping the vulnerable system up because you think nobody else should know is a bet, I don't think it's sound. State actors are investing a lot to find and exploit those vulnerabilities, in this case probably even funded the implementation of the vulnerability, so I think you should assume that any vulnerability you discover is already used. permalink fedilink source parent
[β] oce@jlai.lu 4 points 2 years ago* In this case, downgrading to the not affected version. If there's no possible downgrade, stopping the compromised system until it is fixed. Keeping the vulnerable system up because you think nobody else should know is a bet, I don't think it's sound. State actors are investing a lot to find and exploit those vulnerabilities, in this case probably even funded the implementation of the vulnerability, so I think you should assume that any vulnerability you discover is already used. permalink fedilink source parent
