Every piece of hard data available suggests: 1) patches don’t have 100% deployment 2) criminals disproportionately use known vulnerabilities
-
-
ppl making these arguments always seem to love saying “we” so I’ll leave it open too. I think it’s so they can No True Scotsman
-
Certainly _I_ want to be able to defend, but I acknowledge there's a "public health" side too.
-
But the solution isn't allowing criminal NS actors to keep vulns hidden. It's imposing costs for bad security practice.
-
Making sw vendors liable for security bugs and businesses using unpatched sw liable for harm to others when they're compromised.
-
that seems like a good idea up until it isn’t. Markets can solve problems if they have the information.
@dotMudge (may) solve it -
That's basically how it already is for financial inst. The only proposed change is putting a value on ppl's privacy/personal data.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.