> I hope these internal audits are now a normal part of their business. They now are, at 3 stages: - During design, - Before early field trial, - Before pro

> I hope these internal audits are now a normal part of their business. They now are, at 3 stages: - During design, - Before early field trial, - Before production. Stuff like this is bad for everyone so we're spending a lot of effort upstream to ensure these things don't happen again. And yes it's embarrassing when we find existing products that have these vulns but there's a no-blame attitude that's really helping get things addressed instead of ignoring them (which is the default in large organizations). The faster we can find and address the errors of the past, the better off everyone is.