Oh no! „Squidbleed“ found by Mythos! When using http:// urls via a squid proxy, an attacker might see the data!😱
Maybe we should all be using https: on the internet or expect our traffic to be public. Wait…we already do that since Lets Encrypt started a decade ago!
This vulnerability could have been a bug report.💁🏻♂️
@icing the security industry has always struggled with context when evaluating "security issues".
The fact that somebody could, if they broke through 4 other layers of security gain access to data that isn't actually sensitive anyway isn't the emergency you think it is, Mortimer. The lock on my bathroom door also isn't going to stop people from stealing my toilet paper.
Stefan Eissing
Aatch