<i>&gt; But there&#x27;s also a view that computer security research can&#x27;t really hurt people, so there&#x27;s no real reason for sort of ethical oversight machinery in the first place.</i><p>Worse: there&#x27;s a view that people who get owned &quot;deserved it.&quot; Our industry, and its academic attachments, have a really strange vindictive streak towards those who it should be looking out for. (Which is not to say that those people should be looking out for people swapping child porn--but what about the thousands and thousands of people who were <i>not</i>?)