carlos on Nostr: If you can make software do something that the developers didn't intend for it to do, ...
If you can make software do something that the developers didn't intend for it to do, I'd call that exploiting a bug. But why is this classified as a security vulnerability?
Luke Dashjr (npub1lh2…a9nk) The CVE is for the vulnerability enabling Inscriptions to bypass node policy (regardless of what it's set to).
There should be no reason to be angry. It's just the normal procedure for security issues
Published at
2023-12-15 22:01:25Event JSON
{
"id": "20e0b4f67ed3455fdf2a64142181645a2b8df0ab369aae9c5ea7e40835bcf432",
"pubkey": "03612b0ebae0ec8d30031c440ba087ff9bd162962dffba4b6e021ec4afd71216",
"created_at": 1702674085,
"kind": 1,
"tags": [
[
"p",
"fdd5e8f6ae0db817be0b71da20498c1806968d8a6459559c249f322fa73464a7"
]
],
"content": "If you can make software do something that the developers didn't intend for it to do, I'd call that exploiting a bug. But why is this classified as a security vulnerability? nostr:npub1lh273a4wpkup00stw8dzqjvvrqrfdrv2v3v4t8pynuezlfe5vjnsnaa9nk nostr:note1ahdy5z49l6mkm6tu7nca7n2xgkdwrde4fz0vuwzdjxgr5asgghaqklhmmf",
"sig": "f5cfa3d8d5bacf0f1711df697abfca30a422f7b409eb268eed05753581526a0ba5e5d9e56ca1592b4eb96c9e3f00a10ba1e2907fc90c5558ee7e69849b61d091"
}
