3 ms·
One point of view is it's a mafiosi tactic. Create the problem. Sell the security solution. Or, at best, it is irresponsible to enable attackers. Another is th
by mmaunder 8y ago
One point of view is it's a mafiosi tactic. Create the problem. Sell the security solution. Or, at best, it is irresponsible to enable attackers.
Another is that by disclosing security problems and the tools to test and research them, we enable defenders and we fix what might be kept confidential and exploited by attackers. The theory that sunlight is the best disinfectant.
- h1d 8y agoIt's not a magic and if detection tools don't support http/2, then it's their fault and quite frankly anybody could come up with this tool. The "enabled" attackers surely are nothing when they couldn't have come up with anything better themselves. It just made the discussion of such tools public.