261–270 of 301 posts
Earlier quoted context omitted.
I wish modern society had more guilds in general. So many interesting things are possible when likeminded people come together.
Like economic protectionism?
Earlier quoted context omitted.
I wish modern society had more guilds in general. So many interesting things are possible when likeminded people come together.
Like economic protectionism?
Earlier quoted context omitted.
It seems like the problem is that there is disclosing as a zero day isn't seen as a credible thread, since it's generally seen as bad practice. If security researchers wanted to try and collect more they could in theory form some kind of union to keep up the price of bounties, with like a middle agent pricing the bounty and disclosing the vulnerability if the price isn't met. Maybe combine with some kind of insurance…
It "isn't seen as a credible thread" because it's immoral. Sequencing plays a major role here. And while that may seem somewhat arbitrary, it is significant. (Similar case, that, for some reason tech people have entirely too much trouble understanding: Announce "I'm going to shoot this gun at that target". Person, having heard you, walks and stands in front of the target. Are you still allowed/morally right to shoot?…
Earlier quoted context omitted.
> Is it legal to do this? Post on Twitter that you've asked Company X for this bounty and if they don't pay it by Date X you'll post it on Twitter. No, it is not legal. This is called blackmail. https://www.justia.com/criminal/offenses/white-collar-crimes... Although as a non-legal expert, I'm not clear on how this is different from demanding that the company fix the bug or else you'll reveal it after ninety days a l…
IANAL, but: The classic situation of blackmail is demanding money from someone, or else you'll reveal some embarrassing fact about them, report that they committed some crime, etc. Saying "Give me money or I will publicly disclose a bug in your computer systems" – that fits the classic situation of blackmail straight on. Saying "Fix this bug in 90 days or I'll publicly reveal it" – doesn't fit the classic situation o…
Earlier quoted context omitted.
It was always thus. In fact, until the ‘60s, a girl had to rely on her beauty and personality to eat and survive , i.e. by marrying. I have a daughter and, while obviously I’d prefer she didn’t end up on onlyfans, I really don’t want to limit what she should do or what talent she should leverage to reach happiness and/or prosperity.
> It was always thus. In fact, until the ‘60s, a girl had to rely on her beauty and personality to eat and survive, i.e. by marrying. The way this is framed today by people is soo disgusting. 1) Women did work before 1960. 2) Two incomes are better than one. Married couples are better off financially. Many women worked part time while the children were at school or in the evenings when the husband was back at home. I…
We now see the vestigial remains of this “natural state” in western countries, thanks to the changes brought by mass-industrialization and consumerism (both forces being constantly hungry for bodies, and hence working as Great Levellers between sex, race, age, culture, etc) but it’s still very much present all over the world - the problems in Afghanistan or Pakistan are well-reported, for example, but hardly unique.
Earlier quoted context omitted.
well, I might. I finish college back in 2019 and my teacher who was my counselor, runs several projects trying to make SE and CS more attractive to girls. I guess she'll have a harder job to do now, knowing that a girl could rely on her beauty to makes thousands of dollars exposing herself to strangers. Damn it, I have a two year old niece, I guess me and my brother better think something fast, so when shes a teenage…
You can become popular on onlyfans too, your audience will just be gay men.
Earlier quoted context omitted.
>> Which is essentially market driven blackmail as far as I can see. Modern medicine can also be like blackmail. Nobody has to actually threaten you, but nature will kill you unless you pay whatever the price of treatment. That's why we need competition, and why pharma companies like monopolies.
It differs from blackmail because you the sick person are the one requiring others to perform a service for your benefit. With blackmail (and generally extortion) you are threatening to take an action unless someone pays you not to.
So in this threads context, "hey I found a vulnerability in your infrastructure, you could pay me for it" does not actually constitute blackmail unless they actually follow it with "I'm selling to the highest bidder which may not be you".
Earlier quoted context omitted.
Like economic protectionism?
We have lots of that already, but it's more "protect the rich" than "protect our IT workers"
Earlier quoted context omitted.
Vulnerability researchers aren't generally academic researchers. "Vulnerability research" is a term of art.
But there are people who generally research vulnerabilities in academia and your “term of art” doesn’t really apply there. Point being - “vulnerability researcher” means one thing talking to a PhD student at CMU vs talking to someone in the industry.