3 ms·
There's also the issue that there's no mechanism to force companies to keep servers up to date or face consequences so it's only possible to really do half the
by rtkwe 5y ago
There's also the issue that there's no mechanism to force companies to keep servers up to date or face consequences so it's only possible to really do half the work. Blue teams could find every vulnerability out there but you'd still have companies running old versions or refusing to put out patches to their customers (and customers not updating devices deployed in their home).
- rocqua 5y agoThe mechanism has sort of revealed itself recently, and it is not a net positive: ransomware.
- rtkwe 5y agoTrue enough I guess, though it’s definitely not what I’d pick. Tangentially I wonder why ransomware hasn’t been a thing for longer. Was it an issue of how to do payments that crypto solved?
- rocqua 5y agoThe consensus seems to be that it is crypto making receiving the ransom easier, and Russia (and other jurisdictions) giving ransomware crews free reign. I think the second one might be more important, because it is generally known who the big crews are, and it is actually easy to screw up the opsec on crypto.