Comment

Comment by gjsman-1000

So if I'm understanding correctly:

1. There was a leak of the pre-announcement

2. Calif sees leak, goes and releases dancing anime girl video before pulling it, goes viral

3. Chainguard sees dancing anime video, doesn't recognize Calif, and thinks the exploit is in the wild

[Edit 3a]: Or alternatively, Calif's leaked video causes the PoC to be found by others by providing enough of a lead

4. Chainguard releases updated binaries thinking it doesn't matter, causing the real exploit to then be found early

5. Which then causes PHP Foundation to basically have a meltdown

Personally I blame Calif for the unprofessional video which absolutely completely looks like some script kiddie and for being too detailed [edit 2: assuming Calif produced it and the anime wasn't a prank edit]. In this case it wasn't just unprofessional fun but may have literally messed up the responsible disclosure.

parent gjsman-1000 10 days ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton