I dislike many aspects of google, but project zero is not one of them and has greatly improve the overall security of the industry.
Also their blogs describing how security exploits work are always super interesting
Also their blogs describing how security exploits work are always super interesting
What is the argument for this?
> For nearly ten years, Google’s Project Zero has been working to make it more difficult for bad actors to find and exploit security vulnerabilities, significantly improving the security of the Internet for everyone. In that time, we have partnered with folks across industry to transform the way organizations prioritize and approach fixing security vulnerabilities and updating people’s software.
This feels pretty reasonable, we don't have a spare universe to act as our control, but their intervention does seem likely to have made us more secure overall than otherwise.