5 ms·

Wow... patch tuesday analysis from a reporter who doesn't know how virus total works https://twitter.com/silascutler/status/1383085248381128715 https://twitter.

by afrcnc 5y ago

Wow... patch tuesday analysis from a reporter who doesn't know how virus total works https://twitter.com/silascutler/status/1383085248381128715 https://twitter.com/silascutler/status/1383085248381128715

zelon88 5y ago
I view Krebs as a tabloid. It is a stopgap for layman's with slightly above average opsec knowledge. It is rather dangerous because he is wrong or misrepresents reality rather often. And there's something sensationalist about every article. They always have this rushed, panic driven, sophomoric writing style. To quote a comment I read on HN once, "Krebs is a security entertainer, not a security researcher."
- deleted 5y ago
  [deleted]
- boston_clone 5y ago
  Could you provide some examples to bolster your claim about this person's journalistic integrity? There are some technical details that may be abstracted or analogized in less-than-accurate fashion, but I don't recall reading an article or post and thinking "gosh, that's just _wrong_"
  - atatatat 5y ago
    He's generally a "good guy", but if you haven't figured out he's a cowboy, just read more of his shit. Any of it, really.
  - afrcnc 5y ago
    https://twitter.com/VessOnSecurity/status/1394311907666972672 https://twitter.com/VessOnSecurity/status/139431190766697267... https://twitter.com/juanandres_gs/status/1394725629640298502 https://twitter.com/juanandres_gs/status/1394725629640298502 https://twitter.com/fwosar/status/1394465986087161856 https://twitter.com/fwosar/status/1394465986087161856 https://twitter.com/vinopaljiri/status/1394326993500524545 https://twitter.com/vinopaljiri/status/1394326993500524545
  - zelon88 5y ago
    Ok, [1] https://itwire.com/security/infosec-researchers-slam-ex-wapo-man-krebs-over-doxxing.html https://itwire.com/security/infosec-researchers-slam-ex-wapo... [2] Note: This looks like the same issue as above, but it is separate; https://itwire.com/security/krebs-accused-of-doxxing-man-based-on-single-source-in-twitter-scam-yarn.html https://itwire.com/security/krebs-accused-of-doxxing-man-bas... To his credit, he never claims to be a hands-on researcher who disassembles and analyzes malware himself. I guess that's why I scratch my head when people point to his work as substantial. He has no skin in the game, no hands on technical experience, and just reblogs more technical articles from actual experts. His only real experience is getting personally hacked and hijacked. Also, to clarify I never questioned his journalistic integrity. I just think he's a mediocre writer. It's his style that I, personally, don't like. One thing he does that I can't wrap my head around is writing about himself in the third person. He uses phrases like "...this author..." in reference to himself. Most authors would not be injecting themselves into a journalistic piece in the first place, but to do it with such bravado is awkward for the reader. Am I supposed to be impressed that you operate a WordPress blog?
silverfox17 5y ago
There is nothing in their terms of service or privacy policy that says personal information can't be used for an ongoing investigation.. just that it can't be used by "the Community". They even say that they collect personal information when submitting. When it is shared with the Community at large, it is assigned a non-personal identifier.

by afrcnc 5y ago

zelon88 5y ago

I view Krebs as a tabloid. It is a stopgap for layman's with slightly above average opsec knowledge. It is rather dangerous because he is wrong or misrepresents reality rather often. And there's something sensationalist about every article. They always have this rushed, panic driven, sophomoric writing style. To quote a comment I read on HN once, "Krebs is a security entertainer, not a security researcher."

deleted 5y ago
[deleted]
boston_clone 5y ago
Could you provide some examples to bolster your claim about this person's journalistic integrity? There are some technical details that may be abstracted or analogized in less-than-accurate fashion, but I don't recall reading an article or post and thinking "gosh, that's just _wrong_"
- atatatat 5y ago
  He's generally a "good guy", but if you haven't figured out he's a cowboy, just read more of his shit. Any of it, really.
- afrcnc 5y ago
  https://twitter.com/VessOnSecurity/status/1394311907666972672 https://twitter.com/VessOnSecurity/status/139431190766697267... https://twitter.com/juanandres_gs/status/1394725629640298502 https://twitter.com/juanandres_gs/status/1394725629640298502 https://twitter.com/fwosar/status/1394465986087161856 https://twitter.com/fwosar/status/1394465986087161856 https://twitter.com/vinopaljiri/status/1394326993500524545 https://twitter.com/vinopaljiri/status/1394326993500524545
- zelon88 5y ago
  Ok, [1] https://itwire.com/security/infosec-researchers-slam-ex-wapo-man-krebs-over-doxxing.html https://itwire.com/security/infosec-researchers-slam-ex-wapo... [2] Note: This looks like the same issue as above, but it is separate; https://itwire.com/security/krebs-accused-of-doxxing-man-based-on-single-source-in-twitter-scam-yarn.html https://itwire.com/security/krebs-accused-of-doxxing-man-bas... To his credit, he never claims to be a hands-on researcher who disassembles and analyzes malware himself. I guess that's why I scratch my head when people point to his work as substantial. He has no skin in the game, no hands on technical experience, and just reblogs more technical articles from actual experts. His only real experience is getting personally hacked and hijacked. Also, to clarify I never questioned his journalistic integrity. I just think he's a mediocre writer. It's his style that I, personally, don't like. One thing he does that I can't wrap my head around is writing about himself in the third person. He uses phrases like "...this author..." in reference to himself. Most authors would not be injecting themselves into a journalistic piece in the first place, but to do it with such bravado is awkward for the reader. Am I supposed to be impressed that you operate a WordPress blog?

silverfox17 5y ago

There is nothing in their terms of service or privacy policy that says personal information can't be used for an ongoing investigation.. just that it can't be used by "the Community". They even say that they collect personal information when submitting. When it is shared with the Community at large, it is assigned a non-personal identifier.