4 ms·

I didn't. I was quite distinct.

• tptacek 11y ago
  So look, it is not obvious to me that this is all "manufactured outrage", and I (a) know one of these researchers, (b) have spent my career mostly in vuln research, and (c) have wasted some brain cycles thinking about this issue. I think I mostly agree with Robert Graham's take on this: http://blog.erratasec.com/2015/07/infosecs-inability-to-quantify-risk.html http://blog.erratasec.com/2015/07/infosecs-inability-to-quan... Robert Graham thinks mostly the same thing you think, but because he doesn't evoke "anti-vaxx" and "trolling" and say things like "obviously manufactured", he's (1) persuasive and (2) not setting fire to a comment thread by picking fights with people. You can write whatever you'd like to write. But if you keep writing like this, most people here won't care what you have to say, and in short order they won't be able to see it either, because you're going to get flagged off HN. It would be helpful to have more people arguing the other side of the conventional wisdom on Miller and Valesek's demo --- more people, that is, arguing the thing you're trying to argue, that the risk was minimal and the upside significant. Please make that argument carefully, and don't caricature it. Thanks for listening.