2026-03-01 13:48 UTC
@agowa338@chaos.social no, it is the same vulnerability: the security analysis only sampled a few key points in time, giving a partial, incomplete view of what the attackers did and of who they targeted. In other words, the command-and-control server can receive and execute different remote commands without leaving any trace. The developer stated who were the primary targets, but he doesn't have access to in-depth information. This is the reason he (and I) also advised all users to update.🙂
Please follow the advice in: https://ieji.de/@LorenzoAncora/116154092794477293
Replies (1)
-
@agowa338@chaos.social 2026-03-01 13:53
@LorenzoAncora@ieji.de I give up. You apparently do not want to learn anything about IT security or how to accurately assess risks. I also had a brief look at your website and many of the projects you claim you've contributed to do not have a single commit of yours and others have only one (or five) commits of yours fixing something in the documentation or doing linting. If you want to learn something from someone that did such risk assessments at work then I'm happy to share but otherwise we're done