19 ms·

Tavis is at it again, huh. Man, is he one productive fellow! Cisco's proposed fix for the exploit seems a bit hacky though.

• EE84M3i 10y ago
  Tavis is an excellent researcher, but it's important to remember that finding bugs and posting them publicly is his full-time job, so it's not too surprising that he finds a few bugs that are noteworthy every month. He seems to emphasize breadth rather than depth in his searching, which is part of the reason he finds so many! After all, bugs are dense and most software is crap... I suspect there are many others who are just as capable of doing the same work, but either A) don't have the opportunity (e.g. they have day jobs, few people work on P0) or B) aren't as public about their findings (e.g. exploit brokers, nation states, etc) Anyway, that's what I remind myself whenever I start thinking "I wish I could be as cool as Tavis". Someday I'd love to have have the opportunity to do the same work.
  • Cyph0n 10y ago
    Agreed, but the fact that he's able to consistently discover horrendous exploits never ceases to impress me. I also love how he has broken basically every major AV software out there.
• jlgaddis 10y ago
  If he ever decides to leave Google and start his own company / start consulting to software development shops, I don't think he'll have any trouble finding customers.