Hacker News Reader

I am rather bored by the specifics of Asusgate, but I do think the story has one very interesting conundrum. If change has to be driven by impassioned masses. And the masses only become impassioned when directly affected. Does it become OK for the good guys to accelerate exposure of the masses to the risks in order to prevent harm happening at a larger scale in the future?

View on HN

That is a question researchers have been asking for decades. Rain Forest Puppy, with the help of some smart, invested colleagues, put together a good framework for Full Disclosure a long time ago:

http://dl.packetstormsecurity.net/papers/general/rfpolicy-2....

When I first found myself involved in disclosures in the mechanical security world, I turned to that document to orient myself, though mechanical security has some different challenges that make following that framework perfectly fairly hard.

Reply on news.ycombinator.com