Hacker News Reader

Flash security has gotten so bad that security analysts can fully disclose a vulnerability patched only 2 months ago. There's been ~5 0day events since then so...

View on HN

There have been 10 Linux kernel CVEs issued in the last 2 months. That includes 4 code execution and/or privilege escalation vulnerabilities. That's not even counting any 0 day's that are (probably) sitting in someone's toolbox.

The point being that this isn't a Flash/Microsoft/pick your target problem, but it's an industry wide, software engineering problem.

What do you mean a "pick-your-target problem"? I was referring to responsible disclosure.

Could you be more specific? The last Debian security update was in April, which is more than 2 months ago.

I'm not the parent, but this is the place to look I believe: https://web.nvd.nist.gov/view/vuln/search-results?query=linu...

And how many Windows 0 days has there been?

Reply on news.ycombinator.com