I'm extremely grateful that there are excellent security researchers like the Qualys person/team and Google Project Zero who are putting their work into the public domain.
An unfortunately large chunk of vulnerability research has "gone dark" and sells their findings to buyers that include intelligence agencies in repressive regimes and organised crime groups.
OSS attracting top-tier adversarial research is IMO necessary for its survival. IDK what would happen if it dried up...
Damien Miller /
npub14u…ys68l
2024-07-01 11:15:09
Author Public Key
npub14uw0zk3gf75y9kdprhpy4peyjp8agehc6sp0vwjh9funrh950x6q2ys68lSeen on
wss://relay.mostr.pubPublished at
2024-07-01 11:15:09Event JSON
{
"id": "4b3381cf911081faad86b2e955b1871826b662ce827f134a5e254e69477d3178",
"pubkey": "af1cf15a284fa842d9a11dc24a8724904fd466f8d402f63a572a7931dcb479b4",
"created_at": 1719832509,
"kind": 1,
"tags": [
[
"proxy",
"https://cybervillains.com/users/djm/statuses/112710943371316387",
"activitypub"
]
],
"content": "I'm extremely grateful that there are excellent security researchers like the Qualys person/team and Google Project Zero who are putting their work into the public domain.\n\nAn unfortunately large chunk of vulnerability research has \"gone dark\" and sells their findings to buyers that include intelligence agencies in repressive regimes and organised crime groups.\n\nOSS attracting top-tier adversarial research is IMO necessary for its survival. IDK what would happen if it dried up...",
"sig": "01d3c70396f7fb08ffd18b6662bf4f157583692c688604ec050c9215669e4175619444a46b27094c9ade2585167c2241ca43a30e6231cd83d32319be143fdbc5"
}