4 ms·
I assume cloud providers have hundreds of security issues that are found internally over the course of a year. Requiring reporting would certainly be a step for
by kerng 8y ago
I assume cloud providers have hundreds of security issues that are found internally over the course of a year. Requiring reporting would certainly be a step forward and testing in production for software would maybe be seen as what it is, an engineering anomaly and failure to perform due diligence.
- UncleMeat 8y agoYou are going to be off by at least an of magnitude. You'd see multiple reports per day for a diligent company.
- stochastic_monk 8y agoThat’s fair. I suppose I would aim for a distinction between minor and major flaws. What would be a reasonable threshold?