2 ms·
>>I could hardly believe it. How could they? Via email, im assuming. >>Who am I? One of the authors of osmocombb and OpenBSC, two tools that have enabled fou
by droopybuns 10y ago
>>I could hardly believe it. How could they?
Via email, im assuming.
>>Who am I?
One of the authors of osmocombb and OpenBSC, two tools that have enabled foundational research into vulnerabilities in mobile networks.
>>Am I spending sleepless nights and non-existing spare time into security research of cellular modems to give a free presentation to corporate guys at a closed industry meeting?
I doubt anyone has that expectation. Harald has created a penalty for asking if there are disclosures that need to be addressed.
>>The same kind of industries that create the problems in the first place,
Has open source eliminated security vulnerabilities in software?
>>and who don't get their act together in building secure devices that respect people's privacy?
Is the situation getting worse, staying the same or getting better over time? I can confidently argue better.
>>Certainly not. I spend sleepless nights of hacking because I want to share the results with my friends. To share it with people who have the same passion, whom I respect and trust. To help my fellow hackers to understand technology one step more.
That reasoning is what it is I guess. I don't agree with the clique approach, but I respect him for being so blatant about it.
Good for the GSMA. Change at scale is hard. It takes time. Some of these coference presentations help motivate change(stagefright comes to mind)... Lead time helps the workerbees get executive alignment to invest in fixes. It is better for everyone that they at least tried to get some information for marshalling a response. Not all presentations are as serious as their title or abstract suggest. I guess we learned where Harald's priorities lie.
- justinclift 10y agoTo be fair, it's far from unknown for the "marshalling a response" to include legal intimidation. Not giving a presentation ahead of time could be viewed as reducing the chance of suppression.
- droopybuns 10y agoI understand your point, but he didn't make that argument. He's been around long enough to know this issue as well. I think it is fair to infer the risk of legal entanglement did not influence his decision by the fact that he didn't bring it up. The way I read his blog post, his main point seems to be about behavior that reflects being a part of a scene or culture that embodies certain passion and values.