3 ms·

>Compare this to the cost of an exploit making into the wild and causing potentially hundreds of billions in value being lost. Hundreds of billions?! What soft

>Compare this to the cost of an exploit making into the wild and causing potentially hundreds of billions in value being lost. Hundreds of billions?! What software vulnerability ever caused financial loss even close to that? Although you are right, that if your products are used on millions of devices you want to earn and keep users' trust. That's what Bill Gates and Microsoft realized 20 years ago[1][2] after lots of Microsoft's users and their devices got wrecked by Windows worms. [1] https://en.wikipedia.org/wiki/Trustworthy_computing https://en.wikipedia.org/wiki/Trustworthy_computing [2] https://www.microsoft.com/en-us/security/blog/2022/01/21/celebrating-20-years-of-trustworthy-computing/ https://www.microsoft.com/en-us/security/blog/2022/01/21/cel...

rKarpinski 3y ago
> Hundreds of billions?! What software vulnerability ever caused financial loss even close to that? Does seem high but Cambridge Analytica Facebook scandal comes close if were talking about market cap they (it-least temporarily) lost over 100B [1] [1] https://www.theguardian.com/technology/2018/jul/26/facebook-market-cap-falls-109bn-dollars-after-growth-shock https://www.theguardian.com/technology/2018/jul/26/facebook-...
- mrkramer 3y ago
  Cambridge Analytica was Facebook's screw-up on their users' data usage policy; basically Facebook enabled developers through Facebook's API and Social Graph integration siphoning of people's data for nefarious reasons. Could this be caught by public crowdsourced bug hunting project? Probably not or perhaps, if you would think about ways on how you can use people's social signals and connections to create some sort of privacy invading or flat out criminal products. I remember that after Cambridge Analytica, Google started limiting their API scope as well. I wouldn't classify Cambridge Analytica scandal as a software vulnerability but as a reckless data usage policy on the Facebook's part.
  - rKarpinski 3y ago
    > I wouldn't classify Cambridge Analytica scandal as a software vulnerability but as a reckless data usage policy on the Facebook's part. In addition to the reckless policy (and oversight), I assumed they were also violating the TOS & SLA's etc of the FB api's they used.

rKarpinski 3y ago

> Hundreds of billions?! What software vulnerability ever caused financial loss even close to that? Does seem high but Cambridge Analytica Facebook scandal comes close if were talking about market cap they (it-least temporarily) lost over 100B [1] [1] https://www.theguardian.com/technology/2018/jul/26/facebook-market-cap-falls-109bn-dollars-after-growth-shock https://www.theguardian.com/technology/2018/jul/26/facebook-...

mrkramer 3y ago
Cambridge Analytica was Facebook's screw-up on their users' data usage policy; basically Facebook enabled developers through Facebook's API and Social Graph integration siphoning of people's data for nefarious reasons. Could this be caught by public crowdsourced bug hunting project? Probably not or perhaps, if you would think about ways on how you can use people's social signals and connections to create some sort of privacy invading or flat out criminal products. I remember that after Cambridge Analytica, Google started limiting their API scope as well. I wouldn't classify Cambridge Analytica scandal as a software vulnerability but as a reckless data usage policy on the Facebook's part.
- rKarpinski 3y ago
  > I wouldn't classify Cambridge Analytica scandal as a software vulnerability but as a reckless data usage policy on the Facebook's part. In addition to the reckless policy (and oversight), I assumed they were also violating the TOS & SLA's etc of the FB api's they used.