News for hackers. Stuff that matters.

A comment on The mysterious case of the Linux Page Table Isolation patches. Parent comment

Re:The mysterious case of the Linux Page Table Isolation pat... by madez on Monday January 01, 2018 @01:41PM (#16047323)
The CCC stated also that they observed that companies take a more reactive rather than proactive stance regarding their IT security because they believe that they will be notified of vulnerabilities prior of public disclosure or attacks. This may justify not following embargoes and coordinated disclosure.
[ Parent | on HN ]
Re:The mysterious case of the Linux Page Table Isolation pat... by tbrownaw on Monday January 01, 2018 @03:02PM (#16047734)
Do you have a link?

I'd expect the incentives to be a bit more complicated than that, and I'm also a bit skeptical that either is all that good of a solution. I'd also like to see how exactly "proactive" and "reactive" are being used here, is it about push vs pull for vulnerability notifications, or about hiring their own security researchers, or... ?

[ Parent | on HN ]