4 ms·
Does this universal duty to work for free only concern security research? >You can't just publish information harmful to public It’s simply ridiculous to desc
by ryanlol 7y ago
Does this universal duty to work for free only concern security research?
>You can't just publish information harmful to public
It’s simply ridiculous to describe full disclosure like that.
- effie 7y agoI did not say duty to work for free, but duty to observe some restrictions and weighing positive/negative impacts of your publications on society if you choose to work in that domain.
- ryanlol 7y agoPublicly dropping a bug is still better for the public than keeping it secret. Full disclosure is charity.
- throwaway_391 7y agoI've heard some interesting arguments about publicly dropping 0days to make organisations pull their heads in - Places like Microsoft which historically weren't -great- at security 'deserved' it. I'm not saying that argument is right or wrong, but it was interesting nonetheless. But dropping a 0day irresponsibly can lead to actual impact - what happens if a good person is persecuted, or executed because of the information you disclosed publicly? What about a hundred. Or a thousand?