Hacker News new | ask | show | jobs
by cortesoft 25 days ago
Researcher seems a bit unhinged.
5 comments

This often seems to be the case for the most expert researchers, all a bit quirky. Anyone remember SandboxEscaper? I think they are deceased now but they were dropping Windows 0 days left and right. That person was quite a character. It's hard to describe it without potentially incurring the wrath of someone here but those who know, know.
SandboxEscaper and Nightmare Eclipse both explicitly deny this, but I'm pretty sure they're the same person.

The style is the same, and it appears that SandboxEscaper has previously been fired by MSFT. (they are not dead) https://github.com/BigPolarBear1/The_story

SandboxEscaper, who has not really been very active online, started blogging again right before NightmareEclipse showed up. They've been offering to sell Microsoft related bugs. https://weirdquadratic.blogspot.com

OTOH, there's evidence against my theory in the form of prior tweets by the "ChaoticEclipse0" account, which include references to their age and writing in Moroccoan Darija https://x.com/ChaoticEclipse0/status/1332337678470291459

The twitter account was silent between aug 17 2023 and apr 3 2026, so it's not necessarily the same person using it anymore.

  > most expert researchers, all a bit quirky.
Is it a surprise that if you think differently you act differently? You have to think differently to become an expert. If you thought the same (as the "average") you'd, by definition, be "average".
SandboxEscaper is still alive, but yeah, Eclipse's prolific vuln dropping reminds me of her.
palantir embraces the neurodivergent.

https://x.com/PalantirTech/status/2057157517969445252

Passed away? What evidence do you have around that statement?
That may go with the task of looking for low-level security holes.
Or being forced into homelessness by Microsoft
Takes a certain kind of crazy to pay your bills with bug bounties.
sanity isn't his job
ahh, the "what was she wearing" comment.
ahh, the false analogy comment.
“False analogy” isn’t a counterpoint, it's a deflection. What part of the mapping breaks for you?
False analogy isn’t a deflection, it’s a logical fallacy.
Because you don't agree doesn't make the legitimate callout (i.e., victim-blaming “what were you wearing” vs. calling someone “unhinged” after they've endured repeated abuse/stress) a logical fallacy. Rather it positions you in opposition.

Everything you disagree with isn't incorrect.

I don't really see any evidence of abuse in this post, though. It doesn't really say what Microsoft did, other than ban them from github after they said they will "make Microsoft's bones shatter".

It reads to me like Microsoft didn't pay him what he thought he earned from the exploits (i have no idea who is in the right on that), and then he published a zero day with no notification and threatened the company. Doesn't seem ridiculous to ban them at that point.

Again, I don't know the details so I cant say who is in the right, but the researcher comes off as a little bit unhinged and entitled. Not paying a bug bounty is 'ruining my life'?