nice to see them respond and even address some of the issues. i know security is a big craze right now, so it seems insane people would put systems online witho

nice to see them respond and even address some of the issues. i know security is a big craze right now, so it seems insane people would put systems online without any real meaningful controls, but the reality is until recently, most went untested and were viewed as unnecessary (https everywhere? n are you crazy? https is expensive!). i think its only in the wake of these big public disclosures, and the reduction in cost for controls that people are taking notice. the problem is, we have decades upon decades of very immature software out there, and very little economic incentive to pre-emptively secure them. depending on the information they host, it may simply never be fiscally sound to properly secure them.