2 ms·
I agree with your skepticism but I disagree with your analysis of Stickley. This looks like the typical security clown out there writing his own wikipedia entr
by droopybuns 13y ago
I agree with your skepticism but I disagree with your analysis of Stickley. This looks like the typical security clown out there writing his own wikipedia entry. His article's main point seems to be that he found a buffer overflow. There, he's a security expert.
What security professional worth his salt says "that should not be possible"? The entire security profession is about identifying assumptions and then challenging them. He sounds more like a software developer cashing in on the "s" word because he found a buffer overrun than a security profesional assessing an attack.
- mindcrime 13y agoYou're right, actually. I was trying to be charitable though, and I didn't feel like I had time to do a serious deep dive into this background and credentials. Nor am I necessarily qualified to pass any serious judgement on his knowledge. A quote from somebody like Bruce Schneier, or tptacek, would have been a lot better.
- darkarmani 13y agoWell we criminalized (DMCA) this kind of "hacking," so as far as this "security professional" knows it is impossible because he hasn't heard of it. Maybe if we stop preventing security researchers from talking about vulnerabilities we could know about these things before the thieves.