4 ms·
The people releasing terrible software (that has a default-open admin port with no login credentials and no filtering, as just one of many examples) are not usu
by foobiekr 6y ago
The people releasing terrible software (that has a default-open admin port with no login credentials and no filtering, as just one of many examples) are not usually the ones who end up paying the ransoms.
- hellotomyrars 6y agoI'd argue on the scale of a company like in this example and other high-profile example that if you're integrating software with such glaring holes in your network then you're the one who is culpable. Obviously if there are unknown vulnerabilities that is one thing, but there is a level of due diligence you should practice as the operator.
- foobiekr 6y agoI agree that they are culpable, but that doesn’t close the loop.