4 ms·
Enterprise also doesn't really care. It is just another box to tick and an excel sheet to fill out, correctness isn't actually required. You just need something
by holowoodman 2y ago
Enterprise also doesn't really care. It is just another box to tick and an excel sheet to fill out, correctness isn't actually required. You just need something to put in the list, so you may as well purchase something wrong but authoritative-looking in bulk.
- tpm 2y agoIt might be required and audited for software deployed to / interacting with government cloud. Eventually it will have to be correct too, as otherwise would be a security risk.
- holowoodman 2y agoYes, but that is an expense for a future faraway fiscal year.
- NegativeK 2y agoWhen some new version of log4j comes about and everyone is scrambling to find out where it resides, the cybersecurity team is going to hate the crappy checkbox solution that doesn't actually work. Which is pretty much the norm.
- mnau 2y ago40% of all log4j downloads are still vulnerable versions. Nobody cares, it's just another checkbox/policy. Security team is just another compliance department. It does not bring in money.
- ATechGuy 2y ago> Security team is just another compliance department. It does not bring in money. This. Thanks for highlight it!