It's like Exploit Wednesday for Windows, except Drupal is a lot easier to revers... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Mandatum on Oct 29, 2014 \| parent \| context \| favorite \| on: Drupal Core – Highly Critical Public Service annou... It's like Exploit Wednesday for Windows, except Drupal is a lot easier to reverse and find where the security issues lie given it's open-source.. So instead of taking a day to reverse/find holes, it takes a matter of minutes.

TacticalMalice on Oct 29, 2014 [–]

In addition, the issue was leaked pre-announcement among a great many parties who had time to prepare.

Mandatum on Nov 3, 2014 | [–]

Do you have more detail on that? I'd hazard a guess at irresponsible disclosure, or an internal Drupal employee leak.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact