Remix.run Logo
tptacek 2 hours ago

The original "manifesto" was a deeply cringe zine article written about a group of people who would go on to run IT security practices at the major I-banks.

This update applies a fresh layer of vaseline to the camera lens: "creators in a world of closed systems", "anarchists with a cause". "Our goal was not destruction." Who are you calling "we"? I was there. It was for the most part a bunch of people trading scripts and running them in the hopes of possibly shutting people's phones off or stealing mail spools.

I'm not high-horsing or condemning 90s hackers. They were teenagers fucking around doing what teenagers do (though: I cough a bit when I read Blankenship writing about how we all "existed without skin color" and not "judging people for what they looked like").

What's insidious about this piece is how they use hagiography to cover for a pure gatekeeping argument. Bug bounties commoditizing vulnerability development to produce CVEs! Why, I never: the audacity to pay teenagers in Indonesia to document vulnerabilities when our forebears had to surreptitiously trade source trees on EFNet to participate in the scene.

This piece was written about 6 months before LLMs upended vulnerability research. What LLMs are going to do to the scene is a can of worms, so let's just put a pin in that, and judge it by the standards of August 2025, which by the standards of 1994 were a golden age of hacking, both in opportunity and in the intellectual depth of the field and the possibilities for engaging meaningfully with computer science.