3 ms·

Why?

• argvargc 5y ago
  Isn't it a bit more like a school suspending someone for turning up to class with explosives in their bag, and after they explain and apologise the school let's them off with a suspension, and then a short time later when the suspension is done they go ahead and do it again and this time the school just goes straight to the cops?
  • mod 5y ago
    No, because it's not normal to accidentally or unknowingly bring explosives to school. It IS normal to accidentally or unknowingly have a flaw in software. So normal that it's likely every piece of software on the planet has flaws, many of which allow the exfiltration of data.
  • neiman 5y ago
    No, mistakes are unintentional, bringing explosives to school is. You can, on the other hand, claim it's irresponsible, but there are many devs here who can testify that mistakes do happen and do recur in software projects. You need more evidence than "the same mistake happened twice" to imply irresponsibility.
    • argvargc 5y ago
      There is a point where the potential consequences of a software flaw are so great that failing to fix it properly - after being informed of it - can understandably be seen as negligence.
      • neiman 5y ago
        As far as I understood they fixed the first bug. This is a new one.
      • meowface 5y ago
        It's not clear if the author reported the newly found vulnerabilities, though. I think most security researchers agree that public disclosure is the only recourse if an entity repeatedly refuses to acknowledge or fix a serious vulnerability. But you have to give them fair opportunities to understand and try to address the vulnerabilities before resorting to that.