Comment on Hackers can force iOS and macOS browsers to divulge passwords and much more | Ars Technica
CosmicTurtle@lemmy.world 1 year agoStop trying to force catchy names, researchers.
From someone who works regularly with vulnerability management, it’s actually needed.
Vulnerabilities have really boring numbers and it’s difficult for humans to discuss them in a meaningful way. I believe the first vulnerability to get a “name” was heartbleed, the theory being that with a name people would take it seriously and discuss it properly. Given the severity of this vulnerability, it probably got a name but since it’s being patched by the vendors affected, it was probably not needed.
Heartbleed was needed because individual web sites had to update their software immediately or have their traffic intercepted.
fiat_lux@kbin.social 1 year ago
Yeah, I hear you, fair point. I can't recall CVE numbers off the top of my head either.
Heartbleed was also a great name, whereas iLeakage is... a choice.
I'll probably be referring to it as 'the latest Safari security failure', hopefully they can ensure that description stays relevant for a few weeks.