3 ms·
A group of security researchers who: * Publish the exploit before vendor know it * Publish the exploit before vendor delivered the patch * Send their own opi
by shame_of_cndev 6y ago
A group of security researchers who:
* Publish the exploit before vendor know it
* Publish the exploit before vendor delivered the patch
* Send their own opinion to every media possible (including ycombinator) without mentioning the full event, and using new account to looks more neutral
* Disrespect other people
* And also have their own "secure" software (v2fly, v2ray, ...)
Okay, looks like we need to have a new definition of "security researcher".
I think Signal did what they should do when communicate with those "trick or treat" guys: treat me with fame, or I'll trick you with a PoC. Is there a better word to shorten this review...? Oh there is: robber.
- h_anna_h 6y ago> * Publish the exploit before vendor know it > * Publish the exploit before vendor delivered the patch It's called full disclosure and it is the only ethical way to handle it.
- shame_of_cndev 6y ago"Full disclosure is the only ethical way to handle it". haha