> The less that is shared with the general public the better chance we all have at someone not finding a weak point in any security posture

Oh my god...

> They apparently don't have an informed perspective or insight into just how determined bad actors are in their efforts to harm individuals, countries, and companies.

The irony...

I have yet to understand how a "determined bad actor" would be stopped by a lack of transparency.

What part of "determined" does this guy not understand?

The full story behind that press release is that Evolv is a glorified metal detector company. Some reporters started testing their claims and finding that the devices weren't as good as Evolv said and making Evolv look bad, so naturally Evolv has become passionate about keeping vulnerabilities under wraps.

It's all about the money

Apparently some of the experts quoted are actually on Evolv's board of directors...

@forest Would you know something about this?

@nobody No idea. Did you visit SO via a link on DDG or did you type the URL in directly?

I always only type the URL in directly and never get that kind of warning.

I duckduckgo'ed something, then control+clicked on an SO result

I figured it out though, seems to be a protection against a new attack...

Just posted an answer (well basically just copy pasted the from the attack website...)

This is neat nitter.net/wipawel/status/1557787336037089292#m

> We're collecting some more datapoints on how quickly Pawel can turn fix commits into reliable exploits

@nobody What attack?

Ah nvm I see your answer.

Yeah, just assume everything in one session is the same identity and try to stay under the radar so no one wants to zero day you. Just standard opsec.

Yup. It's very dangerous to operate under the belief that different tabs are as well isolated as different address spaces.

(And even different address spaces aren't well enough isolated!)

news.ycombinator.com/item?id=32426027 lol NetBSD runs on everything

@J-- You'll like this: googleprojectzero.blogspot.com/2022/08/…