4 ms·

You are assuming this was merely a technical issue that went unnoticed, but in situations like this it is of course possible that there are other issues with pr

You are assuming this was merely a technical issue that went unnoticed, but in situations like this it is of course possible that there are other issues with process and governance that are coming into play. If you want something from a corporation, the best course of action is generally to just write (i.e. snail mail) to the CEO, because they are the only person you can be certain is capable of re-marshaling resources to deal with the root cause of the problem, whatever it may be.

ovao 9y ago
> ...it is of course possible that there are other issues with process and governance that are coming into play. Likely, but shouldn’t the director of information security be given more power to take action? I’d think that if that was my title for an outfit like Panera, and if I couldn’t enact any kind of change in face of a fairly serious vulnerability in the span of eight months, I would resign from said position. Because what’s the point of my job, if that’s what I’m dealing with?