Hacker News Reader

I wouldn't say that multiple implementations are duplicating the attack surface since most users will not end up running them in parallel.

View on HN

I meant at a global level (think as if you're attacking all wireguard users, not a single one)

The increased attack surface mostly only affects that one particular implementation though. So, yes, twice as many implementations that may contain exploitable bugs, but each new implementation could only be used to exploit a fraction of the total user base

> could only be used to exploit a fraction

If anything this is a even a good thing, since it means that each individual vulnerability an attacker finds is less valuable to them.

Reply on news.ycombinator.com