A Sysadmin Begs the Internet for One Day Without a CVE
No CVE Today, Please
A satirical plea from a burnt-out sysadmin who has patched, re-patched, and hot-fixed all week: Monday's patch, Tuesday's Patch Tuesday, Wednesday's Exploit Wednesday, and Thursday's out-of-band fix for Tuesday's fix. The request is simple — hold still for twenty-four hours, file nothing, reserve no numbers, post no dramatic proof of concept — so one coffee can be drunk at the temperature it was poured and one ticket closed without opening two.
I'm not asking you to stop finding them. I know they're in there. They have always been in there. I'm asking you to hold still for twenty-four hours.
- viraptor
As much as I'm for releasing everything people learned and patching all-the-things soon, I would really like it if nobody was an asshole around Christmas. You can wait until next year - just let people rest - there's no point doing disclosures then from the non-malicious side.
- phyzome
Valid, but...
1. I would like this better if it were not in LLM-speak.
2. You do not owe your employer more than your 40 hours per week (average). If you're overworked, that's a decision on your employer's part. Do what you can, advocate for appropriate investment in compensating controls, burn-down of tech debt, prioritize the issues... but don't hurt yourself.
- tomtomtom777
I hear you. This pretty daunting: https://cve.0xosprey.com/