3 ms·
you understand the concept of zero days ? companies should be better and if not, criminally liable for their bad code.
by nicman23 3mo ago
you understand the concept of zero days ?
companies should be better and if not, criminally liable for their bad code.
- dist-epoch 3mo agoI don't think you thought this through. does this also apply to individual developers? should Linux Torvalds or the ffmpeg developers go to jail if they merge a RCE zero-day into the Linux kernel or into ffmpeg?
- nicman23 3mo agogross negligence / honest mistake if you cannot differentiate the 2, :insert rude thing here:
- dist-epoch 3mo agook, so you agree that if Linus merges code due to gross negligence, for example he was warned in an email that it contains a RCE and he laughs it off, and still merges it, he should go to jail glad you are consistent in your beliefs
- lnenad 3mo agoOk? I agree with everything. What does that have to do with reporting exploits that don't have bounties?