AFAIK Viceroy didn't pay any security researchers.
-
-
-
Didn't we go through this already with Muddy Waters?
1 reply 0 retweets 0 likes -
As of right now, this story is different.
1 reply 0 retweets 1 like -
Replying to @lorenzofb @mtoecker and
Has anyone been able to get any comment from CTS-Labs on this? They keep sending me nonsense answers and avoiding the basic question: did they work with any short sellers on this project? Did they short sell AMD?
2 replies 0 retweets 2 likes -
Replying to @iblametom @lorenzofb and
Also isn’t the question of morals based on how severe the problems actually are? And how much the researchers market the flaws?
1 reply 0 retweets 1 like -
Replying to @iblametom @lorenzofb and
It's an interesting discussion, I haven't fully formed an opinion yet. I can see arguments for and against.
1 reply 0 retweets 1 like -
Replying to @taviso @iblametom and
I think ethical issues debates are usually not helpful, but from a “does this protect the public better, as CTS Labs claim?” can be answered by “there’s no fix yet and they shared the PoCs without NDA - so no”.
1 reply 0 retweets 3 likes -
Replying to @GossiTheDog @iblametom and
Agreed. The counterargument is that we should incentivize expensive security research by allowing recoup of investment. The optimal way to protect the public is to force big pharma to make drugs at their expense, but then who is going to R&D new drugs? Balance good vs incentive.
4 replies 0 retweets 7 likes -
Replying to @taviso @iblametom and
Yep actual research is well off where it needs to be. I think it’s well known that I put “responsible” disclosure in quotes as I think it’s often not responsible (often it just ends up propping up bad vendors).. but this one certainly is the Death Star attempt at fixing it.pic.twitter.com/ii6VOdGjCJ
1 reply 0 retweets 4 likes
Yeah, I can't even imagine how to defend this one. I think there's room for debate on if security research and hedge funds could work together for mutual benefit, but... these guys missed the mark.
-
-
Replying to @taviso @iblametom and
Hey hedge funds employ me to look at enterprise grade backup and security products, I will find you some vulnspic.twitter.com/yHSedp0YWE
1 reply 1 retweet 3 likes -
Replying to @GossiTheDog @taviso and
for this kind of business hw bugs > sw bugs - this talk by
@justinembone is worth a watch: https://www.youtube.com/watch?v=LPhxn8pJFyU …1 reply 0 retweets 3 likes - 3 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.