3 ms·
Great talk. Imho, the most interesting aspect is Neds emphasis on the length and intensity of the work, and his own attitude toward learning. Over a year of stu
by nly 8y ago
Great talk. Imho, the most interesting aspect is Neds emphasis on the length and intensity of the work, and his own attitude toward learning. Over a year of studying and hammering on the sandbox before a win presented itself.
A lot of people seem to be kept out of the field by the notion that finding these vulnerabilities can only be the result of some kind of genius
- dane-pgp 8y agoYes, his story and his humility are inspiring, but I think there is a bit of survivorship bias in drawing conclusions from a talk like this, or from one person's experience. For example, I can't imagine someone being accepted to give a talk at a security conference about how they tried for 2 years to learn C++ to find a vulnerability in Chrome, but failed to even get as far as understanding enough to change a line of code.