On: Gaining kernel code execution on an MTE-enabled Pixel 8

[mmsc]

Unlike other departments, security teams often don’t have anything to do so this research is a good use of free time.

[zq → mmsc]

What is this comment? Github security research lab solely focuses on security research and publishes some of the best research in the industry.

Man Yue Mo is a security researcher who finds some of the most complex and impactful bugs in the industry like crbug.com/40065473

[mrb → zq]

Seeing mmsc's post history, especially computer security related comments, I presume he was just being sarcastic :)

[mmsc → mrb]

Indeed.

Although, it wouldn’t be abnormal for a security team to have free time, and dedicate it to researching an emerging technology whether it directly contributes to the business goals or not. Of course I’m not talking about a security team that is reading log files from their SIEM while sitting in a SOC.

[ssklash → mmsc]

How many security teams have you been on? Definitely ones with less work than I've been on...

[ramon156 → mmsc]

Sadly people didn't see the sarcasm in this comment

[ambichook → ramon156]

i understand people disliking using tone indicators, especially when they can ruin a joke, but they are really wonderful things that can prevent misunderstandings like this online

[frosting1337 → mmsc]

Wow, that's just absolutely incorrect. Ignoring that tons of security teams are actually stupidly busy, this person's specific role at GitHub is security research. GitHub have security products for code security, which he ties into.