4 ms·
I love the part of the story where the guy naively assumed that it would take his school less than two days to fix the vulnerability. In reality, would probably
by kirillzubovsky 14y ago
I love the part of the story where the guy naively assumed that it would take his school less than two days to fix the vulnerability. In reality, would probably take them months.
How long did it take sony to fix their issues? Oh, right, it took someone to explose it publicly. Heh. It's unfortunate how broken some IT organizations are and that they would rather kill the messenger than fix things.
- chii 14y agoits apathy. The people "responsible" for the service don't actually care, and perhaps probably won't be punished for teh failure of the service. Hence, the vulnerability (and the publicity) only makes more work for them - therefore, they shoot the messenger as a form of blame/revenge.
- LatvjuAvs 14y agoIt involves more or less humongous amounts of pre-meetings, meetings, post-meeting, legal documents, reviews of meeting, implementation strategy, review of implementation, certificating/accepting, post-... You got the picture. In big companies it might take some time. Essentially is is very broken system that destroys itself. It is like you need a manager to watch over a manager that watches over a manager. It is funny to work at such companies, I got fired from one when I said everything I think about them.
- dade_ 14y agoAnd meanwhile, the student data is at risk on the Internet. Every org needs a better plan then that, especially when change management takes weeks/months and this requires immediate action.