6 ms·

I am still waiting for that obvious evidence. That includes more details and also tests on the latest dev version of Chrome (Chromium). I am not defending Googl

by adrianp 15y ago

I am still waiting for that obvious evidence. That includes more details and also tests on the latest dev version of Chrome (Chromium). I am not defending Google in any way, but some claim with no real evidence shouldn't convince anybody.

tptacek 15y ago
I saw a similar mentality on the Skype for Mac thread, as if there is a huge incentive to just make up vulnerabilities. More or less, when HN threads don't want something to be true ("terrible Chrome vulnerability with no public info and no pending patch!"), they make up controversies to keep them from having to accept that it's true. It's a bad habit.
- coliveira 15y ago
  I have over the years participated on a number of communities "for smart people", and this is the case in all of them. People have their particular points of view, and when there is some evidence against what the group considers to be good they use all kinds of ad-hominem attacks. I know it is just human nature, but it is sad that people don't see these patterns occurring.
  - JoeAltmaier 15y ago
    Be fair. Exceptional claims require exceptional evidence. They offer no evidence at all. Scepticism is healthy.
    - JohnnyBrown 15y ago
      A security bug in a web browser on windows may not happen everyday, but I've heard more extraordinary things.
    - lawnchair_larry 15y ago
      Browser bugs are found in every single browser on every single platform. They're reported for free, traded privately, sold privately, given to the vendor for a bounty, used to spread malware, discovered in American corporations, discovered in Iranian corporations, and more. There is nothing exceptional here. This is business as usual. It's non-trivial, but far from exceptional.
  - chopsueyar 15y ago
    What slashdot and Kuro5hin?
burgerbrain 15y ago
Operating under the assumption that this is for some reason made up is an extraordinarily bad idea. Regardless, how they write is still offtopic.
ericd 15y ago
Given that at least some of their customers will probably ask for this vulnerability, you have to judge whether this is a reputable company that would have a reputation to lose if they started spewing out false reports about their capabilities. It appears to be, so I would default to believing it.

by adrianp 15y ago

tptacek 15y ago

I saw a similar mentality on the Skype for Mac thread, as if there is a huge incentive to just make up vulnerabilities. More or less, when HN threads don't want something to be true ("terrible Chrome vulnerability with no public info and no pending patch!"), they make up controversies to keep them from having to accept that it's true. It's a bad habit.

coliveira 15y ago
I have over the years participated on a number of communities "for smart people", and this is the case in all of them. People have their particular points of view, and when there is some evidence against what the group considers to be good they use all kinds of ad-hominem attacks. I know it is just human nature, but it is sad that people don't see these patterns occurring.
- JoeAltmaier 15y ago
  Be fair. Exceptional claims require exceptional evidence. They offer no evidence at all. Scepticism is healthy.
  - JohnnyBrown 15y ago
    A security bug in a web browser on windows may not happen everyday, but I've heard more extraordinary things.
  - lawnchair_larry 15y ago
    Browser bugs are found in every single browser on every single platform. They're reported for free, traded privately, sold privately, given to the vendor for a bounty, used to spread malware, discovered in American corporations, discovered in Iranian corporations, and more. There is nothing exceptional here. This is business as usual. It's non-trivial, but far from exceptional.
- chopsueyar 15y ago
  What slashdot and Kuro5hin?

burgerbrain 15y ago

Operating under the assumption that this is for some reason made up is an extraordinarily bad idea. Regardless, how they write is still offtopic.

ericd 15y ago

Given that at least some of their customers will probably ask for this vulnerability, you have to judge whether this is a reputable company that would have a reputation to lose if they started spewing out false reports about their capabilities. It appears to be, so I would default to believing it.