Low Quality in the SIGARCH blog

SIGARCH runs a blog https://www.sigarch.org/blog/ that runs submissions from the community with little to no editorial oversight. This has led to some "interesting" postings.

31 January 2019 -- Let's Keep it to Ourselves: Don't Disclose Vulnerabilities by Gus Oht
- This blog posting gave horrible advice that is definitely against best practices in security research. The author calls for people who find vulnerabilities to keep them secret.
- When called on it, the administrator of the blog, Boris Grot, claimed that postings "[are an] opinion of the writer --- it is not an endorsement by SIGARCH"
- This post led to at least one member of SIGARCH cancelling their membership.
- After many complaints they eventually posted a counterpoint article: Please Disclose Security Vulnerabilities!
Simha Sethumadhavan has a number of questionably useful postings.
- One is Are Computer Architects to Blame for the State of Security Today?
  The answer to that question is obviously yes, but the blog posting never addresses the question but just lists a bunch of buzzwords.
Apparently T. N. Vijaykumar tried to get the SIGARCH blog to publish his article Potential Organized Fraud in ACM/IEEE Computer Architecture Conferences but they refused.
- Puzzling that the one time there's a useful article to publish that actually has some substance, they wouldn't
- For more coverage of the ISCA'19 alleged peer review incident see here

Back to the SIGARCH issues page