3 ms·
To be even more precise, I don't care how P0 spend their time. If people don't like them blowing up their products, make better products. But writing up an exp
by tedunangst 7y ago
To be even more precise, I don't care how P0 spend their time. If people don't like them blowing up their products, make better products.
But writing up an exploit that was basically handed to them is pretty weak evidence against the angry narrative.
- moyix 7y agoRight, something like this page is better evidence against that narrative: https://bugs.chromium.org/p/project-zero/issues/list?q=Product%3DAndroid&can=1 https://bugs.chromium.org/p/project-zero/issues/list?q=Produ...
- joshuamorton 7y agoThe narrative seems to be both that p0 doesn't do research into Google's stuff, and that p0 doesn't post bulletins about vulns in Google's stuff. Both are untrue, but if you point out one, people flip to the other.
- p1necone 7y agoThe amount of work they put into finding issues isn't relevant though, it's the benefit google might be getting from other companies bad PR. So this situation still seems like a counterexample to me.