15 replies

1. Jeremy Page 54 min later

   Why use a backdoor anymore?

   1. Zach Leatherman 1 hr later

      😭😭😭

2. Zach Leatherman 1 hr later

   it is not bad maintenance it is a honeypot

   1. patrick 1 hr later

      it’s one of those “found this CVE? apply for a job with the CIA!” dev tools advertisements

      1. Zach Leatherman 2 hr later

         I… don’t believe it 😅

   2. Private reply 2 hr later
3. dan sinker 1 hr later

   LOLLLLLLlll

4. Cory Birdsong 1 hr later

   the site’s maintainers have probably been real busy with removing DEI stuff and whatnot

   1. Zach Leatherman 2 hr later

      this is unfortunately believable

5. Zach Leatherman March 3, 2025

   going on two months now, still not upgraded… 😱

   1. Dave Rupert March 3, 2025

      Ummm... pretty sure they have "the best cyber" zach. you couldn't be more wrong here.

      1. Zach Leatherman March 3, 2025

         I wonder how rudy guiliani is doing…

   2. Pelle Wessman March 3, 2025

      Both being DDoS vulnerabilities – one affecting form encoded bodies where it used to parse an infinite depth, another a ReDoS vulnerability for paths with two parameters in the same segment separated by a non-“.”

      It is possible that the CIA site isn’t vulnerable to either?

      1. Zach Leatherman March 3, 2025

         If the site doesn’t use any of Gatsby’s SSR features, maybe!

         1. Pelle Wessman March 3, 2025

            It’s so odd with static site generators that has SSR features