http://emergentchaos.com/archives/2006/05/economics-of-vulnerabilities.html The Emergent Chaos Jazz Combo Mon, 15 Mar 2010 15:02:09 +0000 http://wordpress.org/?v=2.9.2 hourly 1 http://emergentchaos.com/archives/2006/05/economics-of-vulnerabilities.html/comment-page-1#comment-2168 Standing in the NE rain. Mon, 15 May 2006 11:06:29 +0000 http://emergentchaos.com/?p=1708#comment-2168 "Thus, the willingness of a vulnerability researcher to publish a vuln for fame is declining, because the investment has increased[...]" Looking in to the entry point of this area, aren't we still a meritocracy? I mean, isn't there still an interest from incoming researchers to publish so they become known so they become employed? Shouldn't that offset the investment increase? I mean, I look at it from the other side - people willing to invest what it takes now will be more inclined to publish, so they can establish their cred as researchers. The publishing will have more value. Which, in my view, would explain MZ being comfortable with publishing half-a-POC. He's got his cred established up the wazoos, he can lay back a bit :) Of course - this may be a very naive approach, but hey, just my 2e-5 cents... “Thus, the willingness of a vulnerability researcher to publish a vuln for fame is declining, because the investment has increased[...]”
Looking in to the entry point of this area, aren’t we still a meritocracy? I mean, isn’t there still an interest from incoming researchers to publish so they become known so they become employed? Shouldn’t that offset the investment increase?
I mean, I look at it from the other side – people willing to invest what it takes now will be more inclined to publish, so they can establish their cred as researchers. The publishing will have more value.
Which, in my view, would explain MZ being comfortable with publishing half-a-POC. He’s got his cred established up the wazoos, he can lay back a bit :)
Of course – this may be a very naive approach, but hey, just my 2e-5 cents…

]]>