lcamtuf :verified: :verified: :verified: on Nostr: I've been asked why I don't write about infosec more often. Most simply, I learned ...

I've been asked why I don't write about infosec more often. Most simply, I learned that such content has a very short expiration date: 0-day in X, vendor Y popped, govt of Z trying to ban something.

Seminal results are rare. Most of it is just daily news and idle punditry. Don't get me wrong: the coverage is useful. In the moment, it gets a lot of clicks. But when I looked back at a decade of my infosec blogging, I thought to myself "wow... almost all of this is worthless today".

You know... woodworking tips will be relevant in a decade. Sandbox bypasses, not so.