Patching is hard; so what?

Re:Patching is hard; so what? by topkeker on Saturday September 16, 2017 @01:06AM (#15262995)

I've worked in enterprise security teams for the last decade. This is spot on. It's retarded and will never change because there is no accountability. Corporate IT don't give no fucks.

[ Parent | on HN ]

Re:Patching is hard; so what? by toast0 on Saturday September 16, 2017 @06:48AM (#15264019)

Corporate IT is doing what software developers have taught them through experience and pavlovian condition:

Don't touch anything, because it will break if you touch it.

IFF people who release software learn how to release security patches and bugfixes that don't include new features or break existing parts (except when breaking changes are actually needed), then, after several years of good results from pushing changes, Corporate IT will be conditioned to just push security fixes, it's not a big deal, plus it's important.

[ Parent | on HN ]

Re:Patching is hard; so what? by CiPHPerCoder on Saturday September 16, 2017 @02:32AM (#15263256)

Then let's hope Equifax shakes the foundation of their egos and they start to give fucks about this sort of thing.

[ Parent | on HN ]