2 ms·
I mean Okta has shown us that paying for closed source does not imply higher quality or more secure software.
by dartos 3y ago
I mean Okta has shown us that paying for closed source does not imply higher quality or more secure software.
- bongodongobob 3y agoYeah I'm not implying that's the way to go, but thinking since something open source was compromised that it will encourage businesses to donate is wishful thinking.
- acdha 3y agoAlso F5 or Citrix: some of their core security products had 90s-style C exploits and other signs of development practices well behind the times - roughly at the level of going to surgery and seeing your surgeon not washing their hands in the bathroom. https://www.cisa.gov/guidance-addressing-citrix-netscaler-adc-and-gateway-vulnerability-cve-2023-4966-citrix-bleed https://www.cisa.gov/guidance-addressing-citrix-netscaler-ad... https://www.mandiant.com/resources/blog/session-hijacking-citrix-cve-2023-4966 https://www.mandiant.com/resources/blog/session-hijacking-ci... https://www.fortinet.com/blog/threat-research/defending-against-critical-f5-vulnerabilities https://www.fortinet.com/blog/threat-research/defending-agai... https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-138a https://www.cisa.gov/news-events/cybersecurity-advisories/aa...