I'm not in the UK, and not steeped in the details of this proposal, but this is a broadly terrible idea that will do serious harm to computer security.
"Non professional" researchers often find and report critical vulnerabilities. Excluding or discouraging them is insane.
"Non professional" researchers often find and report critical vulnerabilities. Excluding or discouraging them is insane.
https://twitter.com/hackerfantastic/status/1485946271877804033
Computer security has a long history of contributions from people without formal education, training, certification, or affiliation. The idea that such people should be regarded as inherently "suspect" is not just classist and offensive, but empirically false.
The only people who benefit from proposals like this are those fortunate enough qualify to be in the official "legitimate" group. Everyone else, including the public, loses.
Disclaimer: I have no stake in this. I'm not in the UK, and I'd almost certainly qualify to be in the "in" group if I were.
This makes about as much sense as licensing stand-up comics.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
