Twitter Feed
@bascule ("Spooky RFC5280 Section 4.1.2.7 (SPKI) 🎃👻🦀🌹") retweeted:
@rossjanderson ("Ross Anderson") wrote:
The Trojan Source vulnerability allows supply-chain attacks on software written in C, C++, Go, Java, Javascript, Python and Rust. We're releasing details after a 99-day coordinated disclosure period, and some of these compilers will be patched quickly. See https://www.lightbluetouchpaper.org/2021/11/01/trojan-source-invisible-vulnerabilities/