3 ms·
InfoSec: "There is a vulnerability." me: "PR or GTFO." The problem described is that ISOs are professional nags instead of software shippers.
by FlyingCoconut 10y ago
InfoSec: "There is a vulnerability."
me: "PR or GTFO."
The problem described is that ISOs are professional nags instead of software shippers.
- jvehent 10y agoThat only works if your application is simple enough for the infosec folks to know how to write a patch for it. If the organization has 200 of those apps, it's unlikely a transversal security team is able to write patches for each one of them.
- FlyingCoconut 10y agoWhither Agile? Cross functional teams, sitting together. This is The Reason (tm) :)
- yarrel 10y agoNot patches, bug reports. With information in. So the problem can be reproduced and prioritized. As part of the normal development process.