4 ms·
> We need to stop saying don’t roll your own crypto and start teaching it with good examples and good explanations. Or teaching it by silently noting and explo
by dontbenebby 4y ago
> We need to stop saying don’t roll your own crypto and start teaching it with good examples and good explanations.
Or teaching it by silently noting and exploiting the flaw, rather than put out a public blog post.
Once people know you are elite, all such things do is draw attention to yourself.
We live in terrible times, it's not a good idea to engage in cyber dick waving that only serves to draw attention to oneself.
- haswell 4y agoI’m trying to understand this comment. Are you suggesting that writing explanatory blog posts about technical topics is dangerous because someone will eventually come after you for being elite?
- dontbenebby 4y ago>Are you suggesting that writing explanatory blog posts about technical topics is dangerous because someone will eventually come after you for being elite? Yes, based on my personal experience and that of others. But I wouldn't call myself elite... I just know a little bit ;-) I am saying giving them any sort of heads up is not good praxis, since the police have so thoroughly abused the access they already have. See: https://www.vice.com/en/article/k7bqew/us-marshal-securus-phone-location-tracked https://www.vice.com/en/article/k7bqew/us-marshal-securus-ph...
- samhw 4y agoWell, this is bad news for the existence of infosec professionals...