4 ms·
I don't know why technologists would ever want a social norm of responding to security vulnerabilities by severely punishing the people "responsible" for them.
by patio11 13y ago
I don't know why technologists would ever want a social norm of responding to security vulnerabilities by severely punishing the people "responsible" for them. It is highly, highly unlikely that anyone in the C suite made any decision which proximately caused this vulnerability.
Instead, it is likely that you're advocating for firing a modestly compensated engineer whose crime is shared by substantially every production system everywhere.
- wglb 13y agoI vividly remember reading Cuckoo's Egg where he is describing all the machines in the field that shipped with username "Field" password "Service" that were open doors. I thought at the time that the folks responsible for those deployments ought to get a citation rather than throwing teenagers in jail. I wonder now how things might be now. Would folks think a bit more about deploying busted web sites?