All that is wrong with the world…

October 11, 2009

Steve Gibson is a fraud

Filed under: Security — Tags: , , — allthatiswrong @ 7:46 pm

Steve Gibson has a reputation as a security expert and is someone that people who don’t know any better look up to. This article is an attempt to enlighten those people, and show that Steve Gibson is not any kind of security expert and should certainly not be considered any authority. Steve Gibson is a fraud. He has never made any meaningful contribution to the computer security field except to spread misinformation and cause panic. His actions and often vocal claims demonstrate beyond a doubt his lack of an understanding of the field he claims to be an expert in.

He claims to be a security researcher. He has never posted a messaged to the Bugtraq, FD, or any other mailing list. He has never attended a conference, published a paper, discovered a vulnerability or written proof of concept code. Indeed, any other high profile people in the industry consider him to have absolutely no credibility whatsoever. Here is what Fyodor, author of the nmap scanner thinks. To quote:

Gibson is a charlatan whose “research” is written for clueless media reporters (for press attention) and the teeming masses of internet newbies (to whom he sells various products). His “findings” are not new, are always filled with massive hyperbole, and are frequently completely false.

The website Vmyths also has a good collection of articles on him here.

He tried to claim that the WMF vulnerability was a deliberate backdoor, which was ridiculous. It was debunked by Mark Russinovich and Stephen Toulouse here and here. If you don’t know those names, look them up. There is also a good article from the Security Focus site here, to quote:

Gibson has a bad track record: a history of latching onto arcane issues that he doesn’t fully understand and can never prove, and converting his limited understanding into fodder for the next internet melt-down.

He even went so far as to declare AV software completely dead. In 1992. He went on to conclude that:

First, scanning for known viruses within executable program code is fundamentally a dead end.

Someone should probably let the AV companies know. This is a perfect example of the broad statements he tends to make, which only serve to showcase his ignorace. Unfortunately, many people who don’t know any better do actually take his word as that of an expert. Not only that, he wants system utilities to be unable to have direct filesystem access. Which, although limiting there usefulness as utilities, will(according to Gibson) result in 100% viral immunity.

by prohibiting the sorts of direct file system tampering performed by our current crop of system utilities, such operating systems will be able to provide their client programs with complete viral immunity

Upon the release of Windows XP, in massive red letters on his website, he proclaimed:

When those insecure and maliciously potent Windows XP machines are mated to high-bandwidth Internet connections, we are going to experience an escalation of Internet terrorism the likes of which has never been seen before.

This is also an excellent example demonstrating his appalling lack of knowledge. Raw sockets will hasten the end of the internet. Despite access to them being freely available to them in most operating systems for over 30 years. Despite the fact you don’t need raw sockets to pull of any of the attacks he describes. Right….. For an amusing read, you can read about his ordeal of being victimized by a 13 year old hacker here.

He decided to (badly) reinvent SYN Cookies, and then dared to call his approach “beautiful and perfect”. See here. Not only did he completely fail to solve most of the problems that called for such a solution, he failed to give credit where credit is due. The man is a fraud and a liar.

Then there is the whole SpinRite thing, which is, to put it simply, completely bunk. There is a good firsthand account from someone with personal experience here. That is not just picking at the use of marketing terms, it’s a detailed debunking of his idiotic claims.

When you have leading journalists in the field calling him out as a fraud and a know nothing, maybe it’s time to re-evaluate the mans credibility? Hopefully by now you have enough material to make your own informed decision, and (perhaps) refrain from recommending him to anyone. Ever. If nothing else, he serves as a perfect demonstration that you should always be wary of self proclaimed experts.

Update 1 – September 21st 2010
I noticed about a week ago this post was referenced on the Security Basics mailing list. In response, someone provided a link to the Steve Gibson entry on Attrition. It’s a much shorter page, but it’s still worth clicking on just to reinforce everything I have said above, and Attrition is a respectable source. Enjoy.


  1. So, all this time that I’ve spent listening to Security Now… has it been wasted? Can Steve’s explanations of topics be described as accurate?

    Comment by Adrian — March 20, 2014 @ 5:58 pm

  2. Hmm, typo in the first parigaph…

    Comment by billingsbookandbrew — April 9, 2014 @ 6:32 pm

  3. The author of this ludicrous and incorrect article is no more than a paid shill by those jealous of steve gibson whom even bill gates admits is a genius.”If spinrite cant fix it then throw it away” is as true now as it was in the early 90’s.The most brilliant HDD repair software ever created.The shill cant even progran in basic,knows nothing about raw sockets and is a typical skulking,frothing,bitter nerd whose overall significance amounts to that of flatulence within a hurricane.Steve Gibson youve proven yourself with flying colors while the shill has showcased his double digit

    Comment by imo kawasaki — June 28, 2014 @ 4:29 am

  4. I have read this article and, if it is correct or not I have no idea being a novice, but have one question to the Author.
    I am unable to see your name anywhere here, however I could be mistaken as I do not normally indulge in gutter journalism.
    If you don’t have the balls (or the other) to put your name to anything you publish, especially derogatory remarks regarding
    a person, then keep your comments to yourself, along with your IQ which appears to be the same as your hat size.
    My view is, if I am correct when stating the above, you are a gutless coward, that simple.

    Richard Young,

    Comment by Richard Young — July 1, 2014 @ 11:17 pm

    • Another example of an ignorant Australian. I don’t put my name on this blog because I am posting things that could jeopardize my personal life. Anonymity is not synonymous with cowardice.

      Comment by allthatiswrong — October 12, 2014 @ 7:51 pm

      • Anonymity is not synonymous with cowardice. YES IT IS

        Comment by robert smith — June 9, 2015 @ 7:49 am

        • Okay, okay. Am I brave now?

          John Cena

          Comment by John Cena — May 6, 2016 @ 5:34 pm

          • Funny how the best people I’ve ever seen create anything decent online (never10, spinrite, shieldsup, a.m.o.) always have some jealous unknown freak spouting nonsensical out-of-context stories about him/her on some weird poor-man’s blog. So, you couldn’t even buy and manage your own domain name for this? I’m sorry to have to say it, but as another IT worker with 30+ years experience, paid server admin and infosec auditor, crypto analyst and allround techie, I must say you have no idea how wrong you are and how useful and trustworthy Steve Gibson has been and still is. The guy is one of my very few heroes in the computer world. You did not manage to make any valid arguments in your post here. Nice try though.

            Comment by jult — July 2, 2016 @ 5:00 am

        • OK. What’s your home address then?

          Comment by allthatiswrong — October 30, 2016 @ 1:42 am

      • Do you always just label an entire group as having a single attribute? This reply is basically assholery, and makes clear that you are untrustworthy.

        I MAY be able to trust your sources, but certainly given your ad hominem attack clearly cannot believe what you write. Yes, the questioner was rude. Yes, you are entitled to respond in a rude manner. No, that does not mean that you can make stupid statements and assume that they will not affect your status – such as it is – as a ‘blogger’.

        As for your suggestion that you are posting anonymously because what you say here could jeopardise your personal life – yep, that’s cowardice. I have looked at some of your other posts, and I can understand anonymity given the potential for embarrassment given some of your views, but as Henry VIII once said: “suck it up, princess”. You want to put your personal views out into the world, but are not prepared to attach them to your identity. That alone tells me you are a lightweight, while your decision to label a whole nation because your senses got offended tells me that your writing is emotional rather than factual.

        Finally, I notice that others seem to equate blogger anonymity with commenter anonymity. Commenters are not the ones writing a blog of their opinions, and their names are totally irrelevant to their desire to evaluate the person making claims… something that is impossible when the blogger is anonymous.

        Comment by Stephen — July 23, 2016 @ 1:51 am

        • Nobody give a fuck what you think, Stephen. Take your wall of text and shove it up your ass.

          Comment by Stephena — July 15, 2017 @ 9:44 am

    • I would suggest that (1) Withholding one’s name has nothing to do with the accuracy of one’s argument; (2) There are good reasons for withholding one’s name. One reason is to prevent people like yourself from lashing out in anger. (3) It’s very easy to post a phony name. How do I know your real name is “Richard Young” or that you’re actually in Australia?

      Peter Shuslowski
      Ann Arbor, MI

      Comment by Peter Shuslowski — March 27, 2016 @ 11:05 am

      • I am writing this not knowing where it will fall in the thread. For doubter’s, feel free to watch Gibson’s Security Now recent episodes on routers – Three Dumb Router – and a follow up on IoT’s.. Both are Gibson fails and the two more recent SN’s should be labeled, Security Two Weeks Ago & Nothing Current.

        As to the relevance of unsigned work, I shall defer to Mark Twain – feel free to google ‘why writers use pseudonyms’

        Warren of

        Comment by Warren — March 27, 2016 @ 2:33 pm

  5. I saw these arguments a long time ago, and I have to agree with them. Gibson is an alarmist and really doesn’t know what he’s doing. The raw sockets incident really exemplifies how much he doesn’t know about security. Everyone but most desktop users had access to them at the time and there were no problems, no massive attacks. If a black hat hacker wanted to use them, the could have just gone and grabbed Linux. He is just an alarmist with some good sounding words.

    Comment by OldGuy — July 20, 2014 @ 8:53 pm

  6. I have been listening to SG for many years. I pick up some ideas and filter out the hyberbole. It’s a form of entertainment only. Re: Spinrite, I have used this 4 times and in all cases, it failed. I spent an equivalent amount on a recovery solution, and it worked 4 times. Spinrite had no value for me.

    Comment by Opinion — September 10, 2014 @ 9:21 pm

    • What software? You guys who write this crap are a joke. Name the software that worked when Spinrite failed, or as far as I am concerned your just one more bigmouth insecure jackle who cowares behind aninimity

      Comment by joe howard — February 12, 2015 @ 1:01 pm

      • >aninimity

        Comment by John Cena — May 6, 2016 @ 5:33 pm

      • “What software? You guys who write this crap are a joke. Name the software that worked when Spinrite failed”

        Not about data recovery but drive recovery since Spinrite didn’t recover it either after 3 days of clunking with no results.
        The software? diskpart clean all a couple of times a year on a drive given to me 8 years ago as dead, where Spinrite was never able to do jack shit.

        Thanks, Steve!

        Comment by John Doe — May 6, 2016 @ 5:43 pm

        • Which is why you are named “John Doe” and Steve is named Gibson. For me spinrite has helped at least 25 out of 30 times I’ve had to use it in my 30+ year computer-storage career. And it has a higher success-rate if you do what it says on the tin, i.e. you use spinrite before you use a drive and you store its essentials. But you didn’t, because you’re just another John Doe that doesn’t know what he is doing. Steve does know what he’s doing. That much I’ve learned over the years.

          Comment by jult — July 2, 2016 @ 5:09 am

  7. It’s funny to read that people that come here to defend Gibson do it in the very same emotional way as he does. Do they not have the brain to read through the given references and think for themselves? Why don’t they cite references instead of childish bash-down offenses? Are they astroturfing? Have they no ability to rationally debate? Or have they no real IT expertise?

    By the way, my personal years-long experience with spinrite is a nothing special. I’m glad I’ve pirated it as *for me* it’s not worth a penny.
    One laptop I have had the hdd always clicking for some time, being slow and having the Linux console printing out read errors. Spinrite reported for several runs that the drive was flawless… In time, the drive fixed itself.
    Another hdd was given to me already as dead. 7 years ago! Regular maintenance with spinrite has done nothing, it only showed a lot of seek errors. Once or twice a year the drive starts to create *massive* amounts of read errors. Spinrite corrects zee-ro of them and marks them as uncorrectable, saving NO data whatsoever. When this happens, I boot Windows and run a diskpart clean all on the disk. After this, I run spinrite again and, apart of all the seek errors, there are *no* bad sectors…
    I restore the OS onto the drive and store no documents on it whatsoever, and it will run ok again for months, although there are a lot of relocated sector counts and the BIOS always warns the disk as ready to die at every boot.
    Also I have ran spinrite on two computers this week and was presented with red crash errors with no user friendly descriptions…
    Paying for spinrite? Not for my bacon!

    Just adding one more piece of wood into the fire…
    Why would a so-called security guru still be using Windows XP SP2 (claiming his machine would not survive the update to SP3) years after Windows 7 was out? Has he tried downloading and injecting SP3 onto his SP2 installation and then installed it? (there is no more info to make judgments here)
    He is definitely a *very* intelligent person… So why isn’t he using Linux!? (I’m not bothering restarting the old war about the security comparison between Windows and Linux…)

    Thank you so much for your public service, Author!

    Comment by John — October 10, 2014 @ 3:04 am

    • LOL, you’re killing me. So you think this here ‘article’ makes others obliged to somehow take the time to write up a long winded defense? The least you can do is use an actual name then. It’s probably done by someone Steve was rightfully attacking over the years because of his/her stupid software or mistaken crypto-attempts. You can’t handle him being right, so you go look for every little mistake you could possibly think up and post it online, hoping it would damage his credibility, which, alas, has not been working at all. For me idiots like you only give merit to Steve’s credibility in the field. I’ve seen this so many times before. It happened in usenet as well, it’s not new. It usually fails to do any real damage, obviously because you have no real valuable work to show for, while Steve does. Steve has this netcast every week, for years now, yeah no shit Sherlock, if you speak for so many hours, you’re bound to say some things that aren’t entirely true, so what? You rectify them, which Steve often does. But you don’t hear that, do you? Because you’re a hurt little boy that can’t handle the truth. Grow a clue.

      Comment by jult — July 2, 2016 @ 5:17 am

      • You’re an idiot.

        My decision to be anonymous has no bearing on the creidbility of what I write. I’m just sick of ignorant people and frauds. The guy is a joke amongst those who actually work in the industry. Not the IT industry full of mechanics who think they know a thing or two because they figured out how to run regedit, but actual professionals.

        Comment by allthatiswrong — October 30, 2016 @ 1:28 am

        • That’s as far as your arguments go, saying that someone is an “idiot” doesn’t make it true. And it isn’t. It’s quite obvious you are the idiot here. Probably jealous too. And beaten by Gibson one day, and now out for revenge. Cowardly hiding behind some bullshit name. You have no idea what you’re writing about, obviously. You’re clearly suffering from delusions of grandeur.

          Comment by jult — October 30, 2016 @ 10:08 am

  8. Very harsh review of Steve Gibson. And like Richard Young – I have a major concern. What is “THE NAME” of the person writing this page? I always want to know who I am addressing & who is addressing me.

    And if you want to write about something important? Why not write about the issues found in this FaceBook document?
    …. That would show me you have true virtue and moxy.

    Comment by CA Jeffo — March 19, 2015 @ 4:18 am

    • Are you new to the internet? You should be used to people not provided real names by now. You ascribe too much importance to a name.

      Comment by allthatiswrong — October 30, 2016 @ 1:45 am

  9. I purchased a copy of Spinrite and it has repaired or at least made cloneable more drives than I can count.

    Comment by Adam — April 22, 2015 @ 9:03 am

    • Disappointing to learn that Adam has not learned to count things beyond one hundred; perhaps not even near one hundred.

      Comment by Warren — March 27, 2016 @ 6:08 am

  10. Just found this. This author seems to have some kind of axe to grind. Gibson ain’t my uncle, but I just don’t see much basis for these attacks. I don’t understand the motivation, but it wouldn’t necessarily appear to be recourse to facts. Gibson may at points have been guilty of hyperbole–I truly don’t know, but let’s say yes–but I’m pretty sure most the things mentioned here actually favor Gibson’s analysis. XP’s initial release was KIND OF a disaster. There were a rash of worms and attacks. Raw sockets WERE a problem. I mean, I’m glad they work fine for you, pal, being the unappreciated Linux power-user that you are, but the market and the attack surface for Windows was a wee bit different. I wax indignant the more I think about this…. While AV sales DO continue to flourish, that’s not necessarily evidence of their effectiveness. A recent study describes the differences in beliefs and habits of normal users and security professionals, and the greatest delta is for the use of AVs. Look it up! The pros put little stock in them. Finally, I would probably classify Gibson as more of a computer science communicator than a computer scientist, at least at this point in his career. But then again…I’d say SQRL counts as a contribution to the field, wouldn’t you? I know this post was written years before SQRL–I don’t care. I’m ready to rule: this is whiny nonsense. And yes, I own SpinRite and have personally reaped its benefits. The placebo effect didn’t fix my hard drive.

    Comment by Matthew Care — November 3, 2015 @ 7:29 am

    • These are not meant to be attacks, just summing up his perception in the industry, and trying to inform those who don’t know better.

      Comment by allthatiswrong — October 30, 2016 @ 1:38 am

      • Well, I’m still pretty sure you’re a dipshit, but I could be wrong. I will always concede that. You may have a valid point buried somewhere in there, but you wrote it so damn trollishly. So what did you expect? I think you should take a fresh look at the whole of Gibson’s career and take another swing at a measured and civilized critique, being specific about that to which you are reacting in opposition. Good luck.

        Comment by Matthew Care — October 30, 2016 @ 11:09 am

  11. This article is nothing more than a ludicrous and unsubstantiated troll which should be removed from search engine indexes.

    Steve Gibson’s contribution to IT security has been legendary. The bulk of tools he has provided have been timely, relevant, elegant, free of charge, and our only source of protection from many threats until they inspired other companies to start developing similar tools, often with his help, that are universally recommended as essential to this day. If he raises the alarm about an occasional issue that never realizes its full potential, I find it easy to forgive and wonder how bad it would have got if he were not around to raise the alarm in the first place.

    However, as an early victim of the WMF exploit it is my opinion he went WAY too soft on Microsoft. Microsoft’s shady behavior in that incident was reprehensible in every regard. They were able to downplay and disavow the threat to convince major news outlets that nothing very bad had really happened which made it impossible for myself and thousands of others to convince any phone company that there was an unreported vulnerability allowing uninvited applications to install themselves then place expensive 900 number calls to download programs that were trashing our systems without our permission. NONE of the stolen millions were ever recovered via the phone companies, or even proven stolen to their satisfaction. They used direct quotes from Microsoft to convince us “something else” must have happened and convinced many of the victims to place blame and punish their teenage children.

    Comment by Paul — November 28, 2015 @ 8:33 pm

    • You are obviously not in the security industry, because you have no idea what you are talking about. The guy is a laughing stock.

      Comment by allthatiswrong — October 30, 2016 @ 1:37 am

  12. In general there is a lot of assertion here but not a lot of substance. Most of the links are to arcane or dead products or issues. Yes, the guy can be hyperbolic. And on occasion, wrong. But is the author a technologist or not? How many roads have you gone down before you scrapped it with another approach. You’ve never had any bugs, ey? You never revisited a technical position a few years latter, laughing at what you did? The difference here is he has a mouthpiece and he’s a self-promoter and maybe a little bit annoying. But he has good intentions and tries to explain things as best as he can. Sounds like you’re not accepting there is a place for that voice or you’re jealous he’s got it? I agree he is NOT a, ‘security researcher’ and it’s irresponsible of him to say so. He’s a security journalist or media guy or something. His heart is in the right place.

    Comment by Jonny — February 2, 2016 @ 3:42 pm

  13. Yet Another coward with a very very week excuse for hiding his name behind grandiose expletives, with not a single shred of definable prof . and I am not Australian but a ex military person with real back bone. Wayne Genn

    Comment by Wayne Genn — February 18, 2016 @ 3:14 pm

    • Steve, it’s time to stop making sockpuppet accounts. Nobody’s buying it.

      Comment by John Cena — May 6, 2016 @ 5:35 pm

      • Nobody buys your attempts at framing Steve. You’re just digging your own grave with it. Here’s proof I’m no sockpuppet either; (and no, my password has not been in any leaked db yet, gee, wonder why?)

        Comment by jult — July 2, 2016 @ 5:28 am

    • Military people are chumps.

      Comment by allthatiswrong — October 30, 2016 @ 1:33 am

    • Military with a backbone?

      Job: Unquestionable order follower.
      Just try refusing yourself to follow an order that will result in the death of civilian women and children.
      That would have been a NOT joke if examples like the civil massacre in Iraq was funny. Get yourself some integrity!

      Comment by Allah Snack Bar — October 30, 2016 @ 10:26 am

      • Good lord…. the internet makes monsters of us all, I guess. This is why I don’t read comments. This thread, of all threads, should be a place for geeks to geek out. We can disagree. We can even be disagreeable. I’m just saying, let’s try to keep the cuntiness dialed down to a soft 2. Try to avoid collectively blaming all military personnel. Try to get over the fact that some people use aliases. No personal information is required to know that the author is a troll who has trolled us all, and is, even now, trolling me still. For those who continue to post, keep it techy, and don’t be cunts. I no longer wish to receive updates on this thread. I wish that it would disappear from Google. Let’s keep it substantive or shut it down.

        Comment by Matthew Care — October 30, 2016 @ 10:54 am

        • That awkward moment where one is bitch slapped with his own cognitive dissonance. And realize sock puppets have more backbone than military.
          Don’t mention taboo issues. Iraq and The Holocaust, like my cousin’s blowjob, has never happened.
          Keep it all down to nice, polite and politically correct 1s and 0s.
          Keep it techy then, but don’t forget that a lot of us security people work as subcontractors for the military that helped to decimate populations. The IBM connection with the Nazi Party is not a conspiracy theory, they even have been photographed in some nice ‘business’ dinners and parties.

          As for Steve Gibson, his contribution to the Industry has been immense. Just look at the amount of RFCs he has authored. *THIS* is a NOT joke!

          Ok, then, lets keep it substantive:

          I hope these statistics are geeky enough.

          Comment by Allah Snack Bar — October 30, 2016 @ 11:36 am

          • Wow how did you know that..
            A (late) exec Moreau there changed name from Morrell and that is not something I’ve heard said out loud toll now…spot on dude.

            Comment by Mrr — December 18, 2018 @ 8:34 pm

  14. Could you make a newer, more in depth article please? I’m not a fan of Steve’s but if these claims are true then you should be able to do more justice to it.

    Comment by Jack O'Neill — June 30, 2016 @ 7:03 pm

  15. I’ve known Steve Gibson since the late 80’s. Talked with him on the phone and bought his Spinrite software with upgrades through a few years until version 6.0. Regarding Spinrite, it worked using assembly language and did help restore to readability *some* difficult to read sectors on hard drives in the 80’s and early to mid 90’s. Once EIDE drives were left behind and SATA drives came to the forefront I stopped using the product because Steve would not update it, despite constant emails to him and because I had no confidence in old assembly language attempts on modern drives. Gibson’s efforts at programming a single product was soon eclipsed by the wizardry of Paul Mace who marketed Mace Utilities, a bevy of serious assembly language directed towards repairing and maintaining PCs and by Peter Norton and later Symantec. After Spinrite fame, from the mid to late 90’s Steve embarked on a weird “shout it from the rooftops” marketing scheme to regain relevance in the IT industry. He seemed to take somewhat after John Dvorak, a writer for PC Magazine and other magazines. This “hyped up” scheme only caused IT professionals to ignore/disregard him and IT neophytes to love him, thinking they were really learning technical secrets only he would expose. None of the conspiracy alarmist “Sky is falling” type of alerts, as found on his webpage, came true though and he further distanced himself from being a true IT professional because of it. My personal feelings on Steve are mixed. I thank him for creating Spinrite at a time when it was needed, but like Bobby Fischer, the great chess player, I feel he has dropped off the deep end of rationality but for only to make a living. I know of and have read the references that the OP links to and their opinions are, unfortunately, correct and reflect the reality of the situation. If you are listening to Steve, you can do better, much much better. (Start off with Experts Exchange or similar tech sites).

    Comment by JMerda — November 6, 2017 @ 12:35 pm

  16. I find all the sockpuppets here amusing. I genuinely can’t tell if they’re actually doing this _for_ Gibson or if they’re just mindless fanboys. Regardless, as someone who has been in the infosec industry for years, I have virtually never heard an opinion stated of Gibson which was not downright negative. This includes everything from various IRC/XMPP servers to SecLists to StackExchange to various security cons (Shmoocon, DEF CON, BSides, etc).

    The man is Dunning-Kruger, pure and simple. And honestly I had no idea he had a mindless following until recently. I thought he was always just a fringe lunatic with no audience. But then again, I used to think the same about Alex Jones wrt being fringe and ignored and was proven wrong…

    Comment by Popup — December 31, 2017 @ 7:01 am

    • Sock puppets? How lame.its muchore likely, the puppet is the author flaming Steve someore. What free website have you created to teach security basics for free? We think GRC page ricks and its two decades old, cut teeth on it. Move onto something positive and non jealous.

      Comment by Mrr — December 18, 2018 @ 8:28 pm

  17. Gibson does know a lot about security. He has been wrong before, sure, but he readily admits it. He sometimes talks about a product or attack that he does not fully understand, true, but he also admits it and it does not mean that he is incapable of understanding it.

    I have a Security+ certification and I can assure you that I am far far below his level of expertise.

    It is funny that the author of this post does not give his name “because I am posting things that could jeopardize my personal life”, as if Gibson is a mobster.

    Comment by Luis Rubio — January 11, 2018 @ 9:55 am

  18. bump just because this is going on 4 YEARS LATER. Meh, I never got the alarmist impression from him, his work is very very simple though. I wish more programs were written with a smaller footprint. Software has become asininely bloated. I never looked at Steve as some awesome guru, just another guy that had a passion for something. FWIW, he’s not exactly a moron either.

    Comment by Ron — February 15, 2018 @ 6:10 pm

  19. TLDR: Steve Gibson is neither a genius nor a complete charlatan. He’s a pretty well informed security/privacy/computer tech talking head who is most similar to science popularizers like Neil deGrasse Tyson or Grant Imahara.

    Stumbled on this page from a reddit link and was amazed at the extremity of the views expressed. (I mean, I guess it’s the internet, so I shouldn’t be that amazed.) I have listened to most SN episodes for several years and have tried a few of Steve’s utilities. I am sometimes frustrated with the small to moderate mistakes that Steve makes. He sometimes corrects himself, but certainly not always. On the other hand, the breadth of topics he covers in fairly high technical depth is amazing. And he’s usually more accurate than not in my experience. He’s certainly not a security researcher in the conventional molds, but I really value his role in making lots of security and security-adjacent topics accessible to a wider audience. I think novices listening to his show would come away with some unfortunate misunderstandings, especially related to some of Steve’s hobby horse topics that he tends to exaggerate about. But I think he fills an important niche for people who are interested in what’s going on in the infosec world, but don’t have the time to follow the myriad more rigorous sources that would be needed to be aware of the same range of topics.

    Comment by Benjamin Ylvisaker — December 13, 2018 @ 9:40 am

    • Sock puppets? How lame.its much more likely, the puppet is the author flaming Steve some more. What free website have you created to teach security basics for free? We think GRC page rocks and its two decades old, cut teeth on it. Move onto something positive and non jealous. …
      Good wording…perfect site for those of us with no time nor inclination to know the tiny bits and bytes of the entire indepth field

      Comment by Mrr — December 18, 2018 @ 8:31 pm

  20. Who wrote this article? I don’t see a name.

    Comment by Jason — February 13, 2019 @ 4:10 pm

  21. The problem with opinions is everyone is allowed to have them and often want to share them. Regardless of lack of information or toxic content they want others to feel how they do.

    If the feeling is this strongly negative its best to try to promote what you feel is right rather than slander what you feel is wrong. It is just your opinion after all.

    Comment by Benny — May 31, 2019 @ 8:31 am

  22. The lot of you are a fucking waste of time

    Comment by Fuxard — August 17, 2019 @ 8:54 am

  23. Who give a shit about any of this

    Comment by Bob Beed — June 24, 2020 @ 11:20 am

  24. To do this, you can purchase a sample established of poker chips from the manufacturer. The cards are dealt one player at a time subsequent proper working purchase. You just have to play to see through it although.

    Comment by Luana Wallington — May 28, 2021 @ 2:19 pm

RSS feed for comments on this post. TrackBack URI

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: