3 ms·
It would be useful to quantify this for various projects with an estimate of how many hours have been spent probing the codebase by well-intentioned security ex
by tlb 13y ago
It would be useful to quantify this for various projects with an estimate of how many hours have been spent probing the codebase by well-intentioned security experts. Just like negative experimental results in the sciences, such findings are rarely published.
- tptacek 13y agoI agree, that would be extraordinarily useful. But well-intentioned security experts usually (a) don't really track their hours on side projects, and (b) have a status-derived incentive to lowball.