Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
jbk
on Jan 23, 2019
|
parent
|
context
|
favorite
| on:
VLC developers refuse to consider updates over HTT...
Absolutely not: the installer blocks downgrade attacks.
wildmusings
on Jan 30, 2019
[–]
I’m not talking about a downgrade attack. I’m talking about upgrading to a known vulnerable version. You are at version X, attacker upgrades you to known vulnerable version X+1, even though the real latest version X+2 has a fix.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search: