Remix.run Logo
avemg 9 hours ago

I'm tickled at the idea of asking antirez [1] if he's ever written a PoC for a CVE.

[1] https://en.wikipedia.org/wiki/Salvatore_Sanfilippo

tptacek 8 hours ago | parent | next [-]

This happens over and over in these discussions. It doesn't matter who you're citing or who's talking. People are terrified and are reacting to news reflexively.

antirez 5 hours ago | parent | next [-]

Hi! Loved your recent post about the new era of computer security, thanks.

tptacek 13 minutes ago | parent [-]

Thank you! Glad you liked it.

emp17344 6 hours ago | parent | prev [-]

Personally, I’m tired of exaggerated claims and hype peddlers.

Edit: Frankly, accusing perceived opponents of being too afraid to see the truth is poor argumentative practice, and practically never true.

jedberg 7 hours ago | parent | prev | next [-]

I actually like when that happens. Like when people "correct" me about how reddit works. I appreciate that we still focus on the content and not who is saying it.

tptacek 7 hours ago | parent [-]

That's not really what happened on this thread. Someone said something sensible and banal about vulnerability research, then someone else said do-you-even-lift-bro, and got shown up.

jedberg 7 hours ago | parent [-]

That's true in this particular case, but I was talking more about the general case.

LeFantome 8 hours ago | parent | prev [-]

Sure he wrote a port scanner that obscures the IP address of the scanner, but does he know anything about security? /s

Oh, and he wrote Redis. No biggie.

PunchyHamster 7 hours ago | parent [-]

That's both wholly different branches than finding software bugs