3 ms·
> Stefan Esser for flinging the vulnerability into the breeze for anyone to catch Then let me help you with this one. The former is responsibility of the world
by feelix 11y ago
> Stefan Esser for flinging the vulnerability into the breeze for anyone to catch
Then let me help you with this one. The former is responsibility of the worlds most profit corporation with tens of thousands of employees, and the latter is under the responsibility of a random guy on the internet.
- dspillett 11y agoBoth are in the wrong. The behaviour of neither is a valid defence for the behaviour of the other. Apple are irresponsible for not addressing the issue in good time (they have known about it for long enough). This fellow is irresponsible for not following decent "responsible disclosure" procedure. He released information of a serious exploitable problem without first making any attempt to inform the people who could do something about it or otherwise checking to see if they were already aware. Relative size, income, employment/employee status, and so forth, are all irrelevant here.
- feelix 11y agoYou can pin responsibility onto a huge corporation. They can be liable for it. But you cannot control the behavior of random people on the internet without seriously impinging upon the general freedom of people everywhere. So the question of liability and responsibility is irrelevant if placed upon a random individual (unless you want a police state). It's best to hold the huge corporation liable.
- foldr 11y ago>But you cannot control the behavior of random people on the internet without seriously impinging upon the general freedom of people everywhere. This isn't true at all. Shaming people for unethical or unprofessional actions which they make publicly is quite effective in altering behavior and doesn't require a police state.