3 ms·
Bugs in the software come from bugs in the process. They are showing their process in their inaction. If their stuff was generally sound except for this, they
by lallysingh 7y ago
Bugs in the software come from bugs in the process. They are showing their process in their inaction.
If their stuff was generally sound except for this, they would have shut down margin trading until the bug is fixed.
- tptacek 7y agoIt's hard to think of a bug or vulnerability that you couldn't compose an argument like this for. Does it matter? They left the back door unlocked; you'd still get in trouble for letting yourself inside.
- lallysingh 7y agoThey clearly don't take the issue very seriously, as they allow margin trading to continue. That is not normal. They're exposing customers to more risk than they should be, and that's a very serious no-no. I don't think small bugs in high quality shops would fall under this argument.
- tptacek 7y agoWhat's a "small bug"? What's a "high quality shop"? I've spent years doing software security assessments for much larger financial service firms than Robin Hood, and found far worse things than this.
- lallysingh 7y agoThe broker/dealer I work for stops trading on bugs causing much smaller (even $0) material impact. For brokers in particular, they are highly regulated and I can't imagine them not ending up with a nasty investigation+large fine from regulators over this.