4 ms·
The main value in releasing tools like this is to demonstrate weakness in our current security controls. A key weakness of biometrics is that there is no secret
by ospray 4y ago
The main value in releasing tools like this is to demonstrate weakness in our current security controls. A key weakness of biometrics is that there is no secret data. Open source tooling like this help people understand that.
- polartx 4y agoI wish I didn’t have to scroll this far to find your rational perspective. Lets take the famous LockPickingLawyer of YouTube, is he responsible for every crime where the thief defeats a lock that he has demonstrated the weaknesses of? I would say “no!”. Exposing a weakness puts the onus of securing said weaknesses on those that sell technology/devices/services that market themselves as “secure”.
- burrows 4y agoThis is just some rationalization that security nerds like to regurgitate on each other.
- polartx 4y agoExposing a vulnerability in a public forum is the fastest way to patch said vulnerability. You don’t have to be a security nerd to connect the dots
- burrows 4y ago> Exposing a vulnerability in a public forum is the fastest way to patch said vulnerability. Unjustified empirical claim. And even if it were true, it would still be insufficient for justifying public disclosure, classic is-ought. Also, only nerds stand up for security nerds.