5 ms·
Repeatedly applying the question "can we leverage <computer hardware subsystem> to exfiltrate data?" is valuable research.
by na85 4y ago
Repeatedly applying the question "can we leverage <computer hardware subsystem> to exfiltrate data?" is valuable research.
- m000 4y agoThe value is pretty limited when the answer is consistently and predictably "Yes". The author is clearly an expert in exfiltration and has deep insights in the area. But instead of working on presenting the big picture, prefers to throw breadcrumbs to the community. After a dozen of "exfiltration using X" papers, one would at least expect an SoK paper.
- bawolff 4y ago> The value is pretty limited when the answer is consistently and predictably "Yes". If the answer was "we tried really hard, but couldn't figure it out" pretty sure the paper would not get published.
- m000 4y agoI know of at least two security-related workshops that explicitly call for "negative results". So, even failures in this research field are definitely publishable, if accompanied with adequate insights.
- prvit 4y agoIt’s really not, the answer tends to be obvious.