4 ms·
I get the concerns about conflict of interest, but I can get behind the CEO's point that their expertise in the space helps them to build better defenses.
by cbsmith 3y ago
I get the concerns about conflict of interest, but I can get behind the CEO's point that their expertise in the space helps them to build better defenses.
- AdmiralAsshat 3y agoExcept the CEO still operates Nuwber. It's hard to believe he's learned from his mistake if he's still actively helming said mistake.
- Drakim 3y agoYeah, I'm 100% for forgiving and giving people a second chance. It's no different than a black hat hacker becoming a security researcher. But there is a clear conflict of interest if he is still actively engaging in the dubious behavior.
- cbsmith 3y agoI think there's a distinction between criminal activity and the usual conflict of interest.
- deleted 3y ago[deleted]
- cbsmith 3y agoI wasn't saying he has learned from his mistake. I'm just saying he no doubt has expertise.
- abhorrence 3y agoCouldn’t you make a similar argument about protection rackets? Their experience shaking down places for money helps them build better defenses against it, right?
- cbsmith 3y agoYou could, particularly since protection rackets actually do compete with each other. I wouldn't want to hire a criminal, but if someone did, they'd likely be effective.
- catchmeifyou 3y agoOr, his expertise from Onerep helps him build a better Nuwber.
- munchler 3y agoSure, let’s put the fox in charge of defending the hen house. He’s an expert on chickens and I’m sure he’s changed his ways!
- cbsmith 3y agoWe hire black hat hackers to help with computer security.
- justinclift 3y agoWhy would you do that?
- cbsmith 3y agoBecause it's effective.
- lcnPylGDnU4H9OF 3y agoIt sounds like you're hiring penetration testers. Why do you call them "black hat"?
- p1esk 3y agoHow do you know the penetration testers you hired are not black hat hackers?
- doktrin 3y ago> How do you know the penetration testers you hired are not black hat hackers? Is the implication that all pentesters are black hats until axiomatically proven otherwise? High bar.
- fullspectrumdev 3y agoA lot of the better pentesters/security consultants have “colourful” backgrounds.
- int_19h 3y agoPer TFA, the guy is literally running ads for Onerep on his people-search platforms. His "business" is pure unadulterated blackmail.
- refulgentis 3y agoquick note, after I almost did: Please don't feed the trolls: they're replying to every. single. reply. with more bait.
- cbsmith 3y agoFair advice.
- StressedDev 3y agoGood catch - I have noticed that Mozilla gets a lot of unjustified hate and criticism. Does Mozilla make mistakes? Yes. Does it do a lot of good? Yes. Does it deserve the abuse it gets online? Absolutely not.
- olyjohn 3y agoI really believe it's because deep down, people love the big shiny brand Google Chrome, yet they know it's kinda fucked. So when they see things like this, they are able to justify it in their minds that they made the right decision. Confirmation Bias?
- nottorp 3y agoProblem is, Mozilla is running in all directions at once like a headless chicken. So we worry Firefox will die.
- refulgentis 3y agoNot Mozilla; the silly "hmm isn't it actually good he ran it? whats the difference between that and black hat hackers?", except its slow drip one at a time one sentence comments that don't acknowledge his interlocutor at all.
- cbsmith 3y agoJust to be clear, I wasn't criticizing Mozilla. I think they did what they had to do, but it's unfortunate the skills can't be harnessed.
- arp242 3y agoI kind of agree, but there does need to be a baseline of trust, and that's rather difficult to give when they're operating both types of services at the same thing. If it had been "I have worked on identity-selling services for 15 years, saw it wasn't a good thing, and now I'm trying to fix the problem" then okay, fair enough. This is something we can at least start with. but this doesn't seem to be that.