2026-04-10 14:06 UTC
@stragu @GossiTheDog You're right, sorry - I've had to page through a few of these articles in the last couple of days, and thought they all had basically the same text. Here's the one that suggests the video requirement was what tipped the hacker over the edge. https://www.bleepingcomputer.com/news/security/disgruntled-researcher-leaks-bluehammer-windows-zero-day-exploit/
For this level of video demo, I've often seen people upload demos with music and a notepad window for anything they need to say while demonstrating.
From a handler's perspective, there are other problems - often it's not clear what the video's trying to show, and spending time to watch the video is just another way in which the handler has their time taken away from good reports by spurious reports.
Replies (1)
-
@stragu@mastodon.indie.host 2026-04-10 22:16
@ftp_alun @GossiTheDog right, thanks for that. I think a live call would be a more sensible requirement. Trickier to schedule but would save time for both parties because producing a video takes time, and because the conversation can be directed, or concluded if it's not going anywhere. Anyway, i obviously know nothing on the subject! 😅 Just curious. Thanks for sharing!