I still struggle to put this in perspective. The sentiment on the mailing lists suggest that while this attack is a lot like all the others, it's the most profitable and practical. Yet the public facing side of this is "it's just like all the others, nothing has changed, don't worry." It seems like we could do better.
I think after some of the mitigations put into place, it's manageable and can be rendered as not profitable. Before the fixes, it could have been utilized but require deep technical skill and know how to pull off.
Title bro
fixed bro 😂
Nice measured response. Shinobi is a good one.
I still struggle to put this in perspective. The sentiment on the mailing lists suggest that while this attack is a lot like all the others, it's the most profitable and practical. Yet the public facing side of this is "it's just like all the others, nothing has changed, don't worry." It seems like we could do better.
I think after some of the mitigations put into place, it's manageable and can be rendered as not profitable. Before the fixes, it could have been utilized but require deep technical skill and know how to pull off.
That's a helpful framing. From what I read it seemed like "rendered as not profitable" was still up for debate.
Here you can find better explanation
#294221