2 ms·
You leave out that even if software A itself doesn't change 1. The OS and hardware under it can change and lead to new vulnerabilities. 2. Dependencies of Sof
by 2pEXgD0fZ5cF 5y ago
You leave out that even if software A itself doesn't change
1. The OS and hardware under it can change and lead to new vulnerabilities.
2. Dependencies of Software A can change, which can lead to new vulnerabilities in Software A.
3. It's easier to find more and more vulnerabilities on a target that does no longer move. And once they are found there will be fewer experts to detect/fix/report it as time goes on.