Node2Shell evolves to HTTP2Shell, blast radius affects many HTTP libs and apps

netsharc 13 minutes ago | parent | next [-]

Well, whoever picked the name HTTP2Shell certainly didn't use any intelligence, artificial or genuine.

It's so meaningless, broad and undescriptive of the actual issue. No it probably doesn't affect an HTTP server with nothing else behind it, so why is HTTP being blasted?

You might as well call it Exploit Pro Max...

	▲	CharlieDigital 8 minutes ago \| parent [-]
		Feels like the goal was sensationalism.

▲

tetha 31 minutes ago | parent | prev | next [-]

Well at least we know about it while or before the giant patch effort for everything else goes on. Just put it onto the pile.

Who turned on hard mode this week?

▲

est an hour ago | parent | prev [-]

wtf Python is also effected. https://pypi.org/project/brotli/ not sure about shell