3 ms·
I think he shouldn't have made the source available. Now it's really only the (apparent?) uncloneability of the Clipper cards that stops someone.
by gpvos 10y ago
I think he shouldn't have made the source available. Now it's really only the (apparent?) uncloneability of the Clipper cards that stops someone.
- nickff 10y agoI am of the view that anyone who finds an exploit should (generally) do what they feel would have the best result. This would incentivize organisations to create payouts (prizes) for non-public exploits, and it would allow concerned citizens to force a change from generally unmovable bureaucracies.
- uola 10y agoThis is just the latest justification among security people to not having acknowledge their own incompetency in things like risk management. Since when was "doing what you feel" considered a reasoned solution? Many times these things aren't even weaknesses as such, just loose tolerances in the system and exposing them under great fanfare just making the system less flexible. Which is pretty ironic if you think about it.
- stickfigure 10y agoThis is a silly objection. If you can clone clipper cards, you don't need special software to cheat the system. The software here is just an academic exercise in optimization algorithms.