Post

One of the things about working in security is that sometimes you have to just sit on a really juicy rumor that could get you a lot of clout. But saying "There is a vulnerability in the Hello World app" discloses to the attacker that they should search for a vulnerability in the hello world app.

You can point an agent at a tweet and say "figure out what this is talking about" and it usually will do just that. If you want the clout, post the checksum with no clues and then promote it later. That's the behavior of a professional.

0 reposts3 likes

No replies yet.