Dan Guido

@daveaitel @flyryan Thanks, I couldn't remember which of your many keynotes that was! I agree, it's hard to find many breaches traced to HB.

@suqdiq @dguido @flyryan That is probably true - I assume VPNs have a diff memory layout or something.

@suqdiq @daveaitel @dguido @flyryan pulling valid creds or sessions is not useless, not sure why Dave said the vuln was

@jstnkndy @suqdiq @daveaitel @flyryan It requires attention to detail and does not easily scale as an attack vector. Shellshock does.

@dguido @jstnkndy @suqdiq @flyryan it was because trying it gota whole lot of nothing. In theory it gets useful info...never saw it in wild.

@daveaitel @dguido @jstnkndy @suqdiq @flyryan What? Have you talked to many IR folks? HB was *definitely* used in the wild. A lot.