4 ms·
In his earlier work at least, he's seemed like a loose cannon.
by Kudos 13y ago
In his earlier work at least, he's seemed like a loose cannon.
- tinco 13y agoHe was also very young then I believe, now he's realised he can make a lot of money by acting cool and professional so he does.
- Kudos 13y agoAnd that could be why he might now be considered, but why he wasn't before.
- homakov 13y agoThere was 2 or 3 cases I regret about. The rest of my work is alright and responsible, no?
- Kudos 13y agoYeah, the first Github and Rails exploit is the one that still sticks out in my mind. That kind of thing can be hard to shake, but it helps that you were quite young at the time. I'm happy to see you've matured a lot since then.
- igorhvr 13y agoI don't think that is a fair assessment of him, even then. At any case, I hired him fairly recently for a security audit and he worked quickly, and was very effective (he found several important vulnerabilities and reported them in a crystal clear manner). He was also a pleasure to deal with (no bullshit stance, something I find enjoyable). The 4000 USD for ~20 hours of work were definitely well spent!
- deleted 13y ago[deleted]
- Kudos 13y agoThe parent was asking why Github haven't hired him, not why nobody has hired him. If you remember, Github actually banned him for hacking the Rails account in his pentesting.
- 66d8kk 13y agoI'm incredibly interested in angling my career towards security and have no real experience. Wouldn't it also be wise to keep people like him 'out of the loop', I imagine it's much harder to audit when they have access to internal code/architecture that would be difficult for an outsider to stumble-upon?
- ADFASFGADA 13y agoI think his behaviour was commendable - he tried many many times to warn, going to multiple people and projects, but they all ignored him - they were too busy being Gem installing Ruby hipster Brogrammers to consider security, and it bit them hard in the backside.