tag:blogger.com,1999:blog-8539880144347728238.post269382635991279815..comments2024-01-24T04:15:08.086-05:00Comments on Carnal0wnage Blog: Follow up to the vuln disclosure postUnknownnoreply@blogger.comBlogger2125tag:blogger.com,1999:blog-8539880144347728238.post-39081274053682710592017-07-19T16:23:49.390-04:002017-07-19T16:23:49.390-04:00As engineers we identify problems symptomatically,...As engineers we identify problems symptomatically, and push upwards in our root cause analysis. This method is problematic due to the indirection of cause and symptom for inter-systemic problems such as the interaction of market forces and cultural ideals. As a community, we want to fix the things, protect the public, and ensure that entities producing systems and components adhere to best practices for securing the problem domains they work in. In the market we look at value, and let's face it, there's always more value on the dark side in immediate monetary return terms. Bounty programs are the middle ground between doing harm and being broke (still between bad and bad). Until there is a legislated place for our work and at least a reasonable measure of compensation for doing the right thing, only those in a position to "give away money" can take the high road on a daily basis (in the luxury suv of choice). Its like military service - only those who believe that the ends of benefiting the community justify the means of personal loss who will walk that path, and since this issue affects civilian life, the numbers just aren't there to make the difference needed (yet).<br />-rageltmanAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-8539880144347728238.post-42451103197390168692017-06-30T07:45:34.920-04:002017-06-30T07:45:34.920-04:00No problem, thanks for asking :)
Not sure how old...No problem, thanks for asking :)<br /><br />Not sure how old you are, CG, but having been around awhile, I find a little self-reflection now and then is a good thing.Anonymousnoreply@blogger.com