Kinda a strange post that I don't quite agree with. Particularly:
> You’re not an expert in your field, otherwise you wouldn’t be publishing in a blog, but writing papers and giving interviews.
Blogs and self-pub are often the only ways some information is shared by nature of the fact that academic publications don't publish things that don't obviously advance the state-of-the-art.
For example, one area I'm close with is computer security. While academia does some quite interesting work here, most major journals balk at the papers which discuss security mitigation defeats unless they're particularly zany (say, breaking ASLR using transient side channel attacks). Blog posts which detail how these mitigations work (ex. Siguza's post on Apple's proprietary APRR [1]) and how they can be defeated (ex. Project Zero's post which builds on Siguza's work to explore how APRR can be defeated in Safari's JIT [2]) provide considerable value to both security researchers, people who develop mitigations, and software people in general who are interested in learning how attackers think.
These sorts of works don't really belong in journals but that doesn't make them any less valuable.
[1] https://blog.siguza.net/APRR/
[2] https://googleprojectzero.blogspot.com/2020/09/jitsploitatio...
> You’re not an expert in your field, otherwise you wouldn’t be publishing in a blog, but writing papers and giving interviews.
Blogs and self-pub are often the only ways some information is shared by nature of the fact that academic publications don't publish things that don't obviously advance the state-of-the-art.
For example, one area I'm close with is computer security. While academia does some quite interesting work here, most major journals balk at the papers which discuss security mitigation defeats unless they're particularly zany (say, breaking ASLR using transient side channel attacks). Blog posts which detail how these mitigations work (ex. Siguza's post on Apple's proprietary APRR [1]) and how they can be defeated (ex. Project Zero's post which builds on Siguza's work to explore how APRR can be defeated in Safari's JIT [2]) provide considerable value to both security researchers, people who develop mitigations, and software people in general who are interested in learning how attackers think.
These sorts of works don't really belong in journals but that doesn't make them any less valuable.
[1] https://blog.siguza.net/APRR/
[2] https://googleprojectzero.blogspot.com/2020/09/jitsploitatio...