infosec.exchange
Eleanor Saitta (@dymaxion@infosec.exchange)
The average web app has a minimum of ten abstraction layers — digital logic, CPU-level logic, CPU microcode, BIOS hardware abstractions, OS kernel, userland, virtualization/containerization, cloud hosting abstractions, CDN and network layer abstractions, and actual application logic. A security vulnerability can breach any number of those — Spectre did nine. Ten, thankfully, is rare, but ask Iran (or anyone working in OT security) about halt-and-catch-fire bugs.