4 ms·
This is so fishy to me, it's so unprofessional of a security researcher. My tinfoil hat is already rattling...
by turbografx16 9y ago
This is so fishy to me, it's so unprofessional of a security researcher. My tinfoil hat is already rattling...
- tptacek 9y agoHave you done a lot of published security research?
- strictnein 9y agoNice non-sequitur. Somehow the limiting factor on the ability of someone to judge professionalism is the number of papers they've written?
- tptacek 9y agoNo, I'm just noticing again that people who don't don't do a lot of vulnerability research have a lot of interesting opinions about the professional norms of people who do that work. But you never know --- maybe they do a lot of research, in which case, yes, their opinion on security research norms is a lot more interesting to me.
- allthenews 9y agoI am not a security researcher, and I do not speak for the person you are replying to, but I do believe that Intel's documented history of unethical, anticompetitive practices against AMD, for example, deliberate compiler handicapping for non Intel CPUs[1], is enough evidence to establish at least some suspicion regarding these results, especially considering the short warning given to AMD before public disclosure. I also wonder, what is the purpose of such white hat operations if vulnerabilities are disclosed publicly without anywhere near adequate time for a fix? Isn't SOP to give more time before going public? 1.https://en.m.wikipedia.org/wiki/Intel_C%2B%2B_Compiler#Criticism https://en.m.wikipedia.org/wiki/Intel_C%2B%2B_Compiler#Criti...
- tptacek 9y agoI'm not arguing about Intel. If you think this is a giant conspiracy by Intel, more power to you --- I'm not engaging further on that.
- rainieri 9y agoMatasano and you got owned quite frequently back in the day. Should be judge you or your company or your opinions based on that too?
- ilovecars2 9y agoWhat’s the background here?
- tptacek 9y agoSick burn, dude.
- deleted 9y ago[deleted]