4 ms·
Who in their right mind is going whistle blow and risk their entire career over a security flaw that was detected internally, found to be unutilized, and was fi
by donatj 2y ago
Who in their right mind is going whistle blow and risk their entire career over a security flaw that was detected internally, found to be unutilized, and was fixed in a timely fashion?
The fact that such a case even has reporting requirements at all seems nuts to me.
- orf 2y agoGood - then the person who sees that they didn’t report it can whistleblow on that and get a nice paycheck. See how that works out for the person who didn’t report it.
- xvector 2y agoI am shocked to see the "let's make writing vulnerable code illegal" take be so popular on HN. If you have written any meaningful amount of code, you have written vulnerable code.
- orf 2y agoCool story I guess, but that’s not related to anything I said.
- hifromwork 2y agoWriting vulnerable code is not illegal, negligence is.
- xvector 2y agoEvery case I've seen in my career where this has happened has not been "negligence" but developers not realizing there's some obscure logging middleware or something.
- pwnna 2y agoDevil's advocate: my bridge fell down because I didn't know the concrete didn't meet spec still seem like negligence?
- s_dev 2y agoAn employee who left for another job or simply retired and who feels this was wrong. Plenty of lads in Meta earn enough to buy a house and have some investments that there is little leverage over them to ruin their careers.
- deleted 2y ago[deleted]