> The most basic rule of professional ethics for security research is actually quite simple: We work to protect users first. lmao yeah sure, im sure you believ

> The most basic rule of professional ethics for security research is actually quite simple: We work to protect users first. lmao yeah sure, im sure you believe that. i think i do too, to a degree. but anyone who's ever run a bug bounty (for example), knows that there are too many people who are looking for a quick payout, for clout, or even just to be annoying i think this article is kinda naive in a lot of ways (there's just a ton i can poke at for something so short), but there definitely is a massive cultural problem in product orgs (researchers are often viewed as annoying), the security "industry" (so many researchers are actually annoying), and even propagated by the business side of things ("who would actually do something like this?")