Remix.run Logo
▲ bawolff a day ago

The video has no usable details in it.

It's maybe not professional to release an omg panic video, but not even remotely the same thing as what chainguard did.

▲dylan604 a day ago | parent | next [-]

I don't know, it's showing most sites being pwnd in less than 20s with some taking just under 30s. Of course, that's on homeboy's local Mac. Not sure how long it takes to gain control with PHP2Shell to run the exploit though. Just started looking at that part myself

▲bawolff a day ago | parent [-]

So, just because they showed they can doesn't mean they showed how.

I dont know why the timing of the bug is surprising to you.

▲numpad0 a day ago | parent | prev [-]

there were security guys publishing inferred details from [INFO] messages, it did contain more than zero usable details

▲bawolff a day ago | parent [-]

Everything i saw on twitter prior to the release turned out to be incorrect. At most people figured out it had something to do with session upload handler and UAF, but nobody knew what.