6 ms·
> I usually take a pretty skeptical attitude on this blog when it comes to Internet security. For the most part we do things wrong, and I used to think most peo
by daeken 13y ago
> I usually take a pretty skeptical attitude on this blog when it comes to Internet security. For the most part we do things wrong, and I used to think most people didn't care. The fact is that I was wrong. If the response to our audit call is any evidence, you do care. You care a lot.
I used to feel the exact same way the author did initially. It wasn't until this year, between teaching a class on security (whose demand I still can't even remotely fathom) and becoming more outspoken about my concerns around the way we handle security, that I really started to realize that people do care deeply about security. That said, most people don't know enough to positively impact security, but that's a problem of education; it's something I'm hoping to put a serious dent in over the next year.
- eps 13y ago> Education Make sure to cover responsible disclosure.
- lawnchair_larry 13y agoThis is subjective, and it's rather presumptuous to claim one particular philosophy as the "responsible" one. Microsoft rejected this term for that reason, despite the fact that it would benefit them.