2 ms·
If it was really a big security flaw, it would have been exploited in those 'several years'. Granted, it doesn't make you feel warm and fuzzy, but there's a lo
by axod 18y ago
If it was really a big security flaw, it would have been exploited in those 'several years'.
Granted, it doesn't make you feel warm and fuzzy, but there's a lot worse.
- gojomo 18y agoFamous last words: "If it was really big, it would have been exploited already." Never mind industry best practices or the cautionary incidents at other companies -- this "it's not big until it bites us" attitude can be used to deprioritize fixing any risky behavior until it's too late. There are low-stakes situations where this attitude is a virtue -- where the damage from an exploit is minor and quickly reversible. For famous and business-class internet services, the stakes are high.