5 ms·
I would think that Cloudflare is reputable enough that they would not state that claim without at least having some knowledge about it.
by Mahn 3y ago
I would think that Cloudflare is reputable enough that they would not state that claim without at least having some knowledge about it.
- loeg 3y agoThey have since rewritten that sentence from: > The attack can even be carried out remotely through JavaScript on a website, meaning that the attacker need not have physical access to the computer or server. https://web.archive.org/web/20230725020052/https://blog.cloudflare.com/zenbleed-vulnerability/ https://web.archive.org/web/20230725020052/https://blog.clou... To: > Currently the attack can only be executed by an attacker with an ability to execute native code on the affected machine. While there might be a possibility to execute this attack via the browser on the remote machine it hasn’t been yet demonstrated. https://web.archive.org/web/20230726204030/https://blog.cloudflare.com/zenbleed-vulnerability/ https://web.archive.org/web/20230726204030/https://blog.clou... I think I am vindicated -- they did just make that up, likely from the claim posted here.