3 ms·
Can someone explain why engineering of bugs into products is bad but hacking to find software defects is good. I think trying to do this sort of research is goo
by andy_ppp 6y ago
Can someone explain why engineering of bugs into products is bad but hacking to find software defects is good. I think trying to do this sort of research is good because obviously it presents a vector for malicious actors we should all be aware of. It’s good that the Linux team found these issues but I don’t see the intention as being any different than any other kind of hacking, just like some organisations will send you phishing emails once or twice a year to see if you’re susceptible.
- ac42 6y agoSociety works because of trust. Activities like these erode trust. It's like "let's try and pour a bottle of acid into the freshwater storage facility".
- deleted 6y ago[deleted]
- andy_ppp 6y agoHow do we stop more malicious actors doing things like this is really the question I’m asking. People who aren’t security researchers but say state actors who want Linux backdoors?
- seoaeu 6y agoWhat's valuable is fixing security issues. So if you "hack" some system and then provide either patches or useful guidance on how to eliminate a vulnerability that is helpful. By contrast, if a security issue is already known/is being addressed, exploiting that vulnerability just causes problems and wastes people's time.