• 0 Posts
  • 30 Comments
Joined 8 months ago
cake
Cake day: February 28th, 2026

help-circle







  • The PHP vulnerabilities (yes there is more than one) are relatively easy to exploit if you can fiddle with what requests your server receives (easy).

    The DNS exploit requires someone to figure out how to man-in-the-middle your connection. While that is trivial for governments, it is much less likely to be done by purely bad actors, simply for how hard “internet” integration is and how visible the problem ends up.

    Both are big problems, but only one of them is continually exploitable, as the DNS issues have been largely resolved even before the very public disclosure.



  • I mean, wouldn’t the obvious answer without being a tyrant be, to just adjust the followup encounters to still be a challenge? At least in creative ways so as not to just end up with a, “no you” feeling to it or glass cannon vs glass cannon?

    I’d prefer to play with a creative DM that would laugh and accept it than one that’ll nerf me for being more creative.