Is anyone else annoyed that the WPA2 KRACK paper author sat on it for >2mos before any disclosure and 5mos before public disclosure?
Show this thread
To put it bluntly: if you put academic creds and getting a paper published before everyone's security, you're an asshole.
-
-
Protip: this makes your disclosure *irresponsible*. So does notifying an academic review board 2 months before notifying vendors. Asshole.pic.twitter.com/7pu3Qhn0cd
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
I would argue he probably had no idea what he was sitting on at first.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Surely this seems like a totally normal thing to put fairly high on your FAQ list!pic.twitter.com/2ot0pHaliU
-
well... happens to often. But technically this is missing academic integrity. There are no honorary authorships.
- Show replies
New conversation -
-
-
How I read this is that he didn’t really know there’s a big vulnerability when he first stumbled over it.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
I would agree more if the vuln had serious impact.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
this... is difficult. you are right, but i can fully understand their motives, which are part of the problem in the ac. Community
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.