3 ms·
I agree that it is nice of google to offer to reward defensive reinforcement of some of the open source software they rely on. But I contend that this effort i
by krenoten 13y ago
I agree that it is nice of google to offer to reward defensive reinforcement of some of the open source software they rely on. But I contend that this effort is unlikely to produce meaningful results that stand any chance at all of countering the R&D happening on the red teams.
- tptacek 13y agoThat implies that it's easier to exploit bugs than to squish them. No.
- krenoten 13y agoOn an equally motivated and skilled playing field, you would be correct. The bugs that will be exploited by meaningful adversaries will not be stopped by this effort. Latent exploitable bugs in most of the targeted mature software require significant, well-targeted compute to uncover. Google's incentives are insufficient to direct adequate resources toward the goal of making the internet a safe place for civilians.