6 ms·
That’s a form of No True Scotsman. You have an idea of what “security research” is supposed to mean based on the kinds that have been profitable to you and the
by freepor 6y ago
That’s a form of No True Scotsman. You have an idea of what “security research” is supposed to mean based on the kinds that have been profitable to you and the acquaintances you keep etc. As someone without skin in this game, I appreciate traditional security research but also muckrakers, immediate disclosure, and many other forms of holding bad actors to account. I don’t care what this is called but I’m glad that Hussein did it.
- tptacek 6y agoI could give a rats ass about coordinated disclosure. Immediate disclosure is fine. You've misconstrued the distinction I'm drawing. It's not between notifying and not notifying; it's between disclosing vulnerabilities and disclosing data gained through vulnerabilities.
- jachee 6y agoThat's all public data, if you ask Clearview.
- tastroder 6y agoPoint being? It's not and nobody in their right mind is asking Clearview for their opinion on morals or privacy.
- jachee 6y agoPoint being that if they can scrape the web and collect and correlate PII, under a claim that’s basically “finders keepers!” and sell that information, that anyone else gaining unrestricted access to that same information can make the same claim of it being publicly available and thus fair game to do with what they will.
- freepor 6y agoI think it's a matter of opinion that the investigative journalist (which is what a security researcher is akin to) can use their best judgment in making. I think the video, right there, of the people walking into their apartment, makes the whole nefarious agenda so much more visceral. OK, maybe they are a cheating couple who will be discovered by their partners or whatever... but I think the tradeoffs are worth it especially given that the media also applied their filter of blurring the faces.