| ▲ | mwalser 4 hours ago |
| I wouldn't say that multiple implementations are duplicating the attack surface since most users will not end up running them in parallel. |
|
| ▲ | ur-whale 3 hours ago | parent [-] |
| I meant at a global level (think as if you're attacking all wireguard users, not a single one) |
| |
| ▲ | swiftcoder 3 hours ago | parent [-] | | The increased attack surface mostly only affects that one particular implementation though. So, yes, twice as many implementations that may contain exploitable bugs, but each new implementation could only be used to exploit a fraction of the total user base | | |
| ▲ | rlpb 3 hours ago | parent [-] | | > could only be used to exploit a fraction If anything this is a even a good thing, since it means that each individual vulnerability an attacker finds is less valuable to them. |
|
|
