"and yeah, how many security researchers would post if they got caught? survivorship bias at play." Used to something similar at play with stock picking. You h

"and yeah, how many security researchers would post if they got caught? survivorship bias at play." Used to something similar at play with stock picking. You heard about people's successful investments but never their losses which they of course kept quiet. This is of course more old school. Now people are much more open about airing daily laundry. My guess is that Schnier would blog about something that didn't work not that that detracts from your point. A lesser known security researcher would not necessarily act the same. Not to mention separately that "getting caught" means you have an interesting story for the press.