3 ms·
Quite simply, fixing security vulnerabilities costs a lot more money than being such a raging dick to researchers that no one ever reports. No reports means no
by mystified5016 2y ago
Quite simply, fixing security vulnerabilities costs a lot more money than being such a raging dick to researchers that no one ever reports.
No reports means no vulnerabilities and thus no expenditure.
- neilv 2y agoIf a short-term-thinking decision-maker has a KPI for low vulnerabilities, they'd rather take the chance of a massive compromise of the company, than to have vulnerabilities reported and definitely hurt their bonus/promotion?
- zelphirkalt 2y agoClassic management think right there.
- rapidaneurism 2y agoYeah because only ethical hackers ever look for vulnerabilities