5 ms·
I love security posts like this. His previous one about facebook messenger status was also really nicely done. He doesn't succumb to the temptation to be abusi
by SwellJoe 10y ago
I love security posts like this. His previous one about facebook messenger status was also really nicely done.
He doesn't succumb to the temptation to be abusive (to either the people who made the thing he's testing, the people reading, or anyone who might be impacted by it), which is something a lot of security researchers seem to find impossible to avoid; there's a lot of calling people various forms of stupid in many incident reports. Even when given ample opportunity by the Tinder folks to call them names, he didn't do so (and, didn't blow it out of proportion, either...it's problematic, but if you're using Facebook and Tinder, you probably are already aware you're giving up a lot of privacy; this is a big deal, but not vastly bigger than using facebook all by itself).
He explains clearly what he did, and what tools he used to do it, which is another thing that often gets left out. Many security folks follow the magician's code ("never show'em how it's done"), and are dismissive that mere mortals could ever understand what they do.
And, he tells a good story in the process. All around, top notch technical writing about a usually boring subject.
- Freak_NL 10y agoThe overall technical outline of the issue and what he did to figure it out are clear — and certainly interesting — but I am having a hard time reading the blog post. This writing style is exhausting to me. Instead of reading normally I find myself skipping more and more text to get to the bits that aren't silly jokes and internet slang. A shame, because it hides the technical insights he has. At least he's not inserting meme-pictures every other paragraph, which seems to be thing now even in otherwise well-written material.
- SwellJoe 10y agoI guess it could be more concise, but I rather enjoyed the humor. It's not an area I'm passionate about, even though it is important, so having it interlaced with jokes (silly though they may be) was a net win for me.
- wingerlang 10y agoAgreed, I find the actual content interesting but I probably skipped 90% of the written text.
- moogleii 10y agoYou haven't mastered the art of internet reading? I.e. aggressive skimming combined with ctrl/cmd-f to get to the meat and potatoes?
- dajohnson89 10y agoEdgiest security blog post ever.
- CPLX 10y agoIndeed. It would be even better if it were translated into English from whatever hybrid internet-speak language this is.
- blackflame7000 10y agoseems to be a derivative of the cracked.com language