<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><a class="moz-txt-link-freetext" href="https://na-production.s3.amazonaws.com/documents/Bugs-in-the-System-Final.pdf">https://na-production.s3.amazonaws.com/documents/Bugs-in-the-System-Final.pdf</a></p>
<p>Look, I'm sure these (Andi Wilson, Ross Schulman, Kevin Bankston,
Trey Herr) are all good people:<img alt="<image about authors
went here>" src="cid:part1.AE64682F.D0673590@immunityinc.com"
height="463" width="263"></p>
<p>But I want to point out that you cannot make good policy
recommendations based on clickbait news articles you've happened
to have read over the years on a subject that is under a ton of
covert protection, especially when none of you have any personal
experience in the field (and even if you DID!). If you want to,
even a little bit, claim that the vulnerability market poses the
kind of danger this paper claims, then you have to say exactly
what percentage of this so called "stockpile" gets used in the
wild by our adversaries. And you have to say why you think that
percentage is too high. Without that data, you have "unsupported
opinions", or as Joe Biden would say, "malarkey". I'm not even
going to go into how "theoretical" their musings on market
behavior in this space are, because this whole policy paper is
trash without any data to back it up.<br>
</p>
<p>-dave<br>
</p>
<p><br>
</p>
<p><br>
</p>
<p><img alt="<another useful image went here>"
src="cid:part2.EB15FB82.35B2E4AB@immunityinc.com" height="985"
width="1374"></p>
<p><br>
</p>
<p><br>
</p>
<p><br>
</p>
</body>
</html>