3 ms·
The problem is not that cyber-security is hard, but that a trillion dollar company is incapable to handle security disclosures.
by emsy 5y ago
The problem is not that cyber-security is hard, but that a trillion dollar company is incapable to handle security disclosures.
- Mtinie 5y agoIn which case—if it’s a legitimate deficiency—that doesn’t bode well at all for any other commercial enterprise. This arms race is always tilted in favor of the attacker.
- derac 5y agoThere are much smaller companies which handle security disclosures much better.
- fragmede 5y agobut there are many many many more that don't, which impeaches the few that don't. The fact that I can reach the CEO of my local small business on the phone is a great when they're sympathetic to my plight. it's actually to the company's detriment when it turns out they're a raging asshole.
- numpad0 5y agoI remember some of early Android phones that ran manufacturer maintained Kernel turning out immune to then-undisclosed RCEs years before disclosure. I think it’s less about disclosure handling but more about being motivated to pay for or build a black magic code analysis tools.
- fragmede 5y agogot any links? that sounds like a fascinating story to read!