3 ms·

Thanks - I've read your original post and I agree with your write-up. I still suspect that Zed basically skim-read and misinterpreted your message - he probably

Thanks - I've read your original post and I agree with your write-up. I still suspect that Zed basically skim-read and misinterpreted your message - he probably has a knee-jerk reaction to the phrase "don't roll your own crypto" and dived on twitter to respond to that, which IMO is a behaviour twitter trains/incentivises people to do (hot takes). The idea that "quantum woo crackpots in crypto are bad" is basically universally agreeable to any reasonable person, including Zed, hence why I think he just knee-jerked in this case.

busterarm 6y ago
I think that's in the ballpark, but Zed also seems to be intuitively aware of something else going on in the infosec community that most people outside of it aren't. There's a huge emphasis on publishing and branding/networking and as a result there are a lot of talking heads. Thing is, most of them are punching _way_ above their weight and it's mostly people just cargo culting their way through the industry. Literally for 20 years, people just looked at OpenSSL and said "well everyone else says it's okay." Knowing a little bit the way Zed is, I think his reaction is because he's sick of the talking heads versus the mediocre output from the "experts" in industry. I thankfully don't work "in infosec", but millions of dollars of infrastructure and its security is my responsibility and I'm not clueless. In fact, I earned my Black Badge doing something legitimately difficult. I'd say that 3/4 of the supposed professionals that I encounter in industry are at least six ways full of shit.
- beaconstudios 6y ago
  That's a reasonable interpretation, but then why is Zed lashing out at OP's original article? I've read through it and it's a reasonable argument that many people in crypto have been making for years. "you don't know anything, you haven't even independently audited OpenSSL for free before it was cool" is not a reasonable response to "there's a problem with woo crackpots trying to gain credibility within crypto", but it is a reasonable (if needlessly inflammatory, but we are talking about Zed) response to "nobody should write crypto except experts like me", which is a common misinterpretation of "don't roll your own crypto". Hence why I suspect it was just a kneejerk reaction to a misinterpretation of the article.

busterarm 6y ago

I think that's in the ballpark, but Zed also seems to be intuitively aware of something else going on in the infosec community that most people outside of it aren't. There's a huge emphasis on publishing and branding/networking and as a result there are a lot of talking heads. Thing is, most of them are punching _way_ above their weight and it's mostly people just cargo culting their way through the industry. Literally for 20 years, people just looked at OpenSSL and said "well everyone else says it's okay." Knowing a little bit the way Zed is, I think his reaction is because he's sick of the talking heads versus the mediocre output from the "experts" in industry. I thankfully don't work "in infosec", but millions of dollars of infrastructure and its security is my responsibility and I'm not clueless. In fact, I earned my Black Badge doing something legitimately difficult. I'd say that 3/4 of the supposed professionals that I encounter in industry are at least six ways full of shit.

beaconstudios 6y ago
That's a reasonable interpretation, but then why is Zed lashing out at OP's original article? I've read through it and it's a reasonable argument that many people in crypto have been making for years. "you don't know anything, you haven't even independently audited OpenSSL for free before it was cool" is not a reasonable response to "there's a problem with woo crackpots trying to gain credibility within crypto", but it is a reasonable (if needlessly inflammatory, but we are talking about Zed) response to "nobody should write crypto except experts like me", which is a common misinterpretation of "don't roll your own crypto". Hence why I suspect it was just a kneejerk reaction to a misinterpretation of the article.