News for hackers. Stuff that matters.
Re:Oracle’s Java 11 trap by JustSomeNobody on Wednesday September 26, 2018 @08:41AM (#18075308)
This is going to come off sounding a bit like victim blaming, but seriously, any business large or small must have a person or people whose responsibility it is to audit all installed software so that nobody gets into a situation such as described in the article.

A business cant afford to let devs just install software willy-nilly like.

Re:Oracle’s Java 11 trap by crispyambulance on Wednesday September 26, 2018 @08:53AM (#18075407)
Yet "willy-nilly" installations happen.

It remains to be seen whether they'll "go after" the whales who can actually afford compliance staff (but screwed up anyway), or after the small-fish companies that just stood up a web-app to get started, or businesses in between.

Re:Oracle’s Java 11 trap by bloodgain on Wednesday September 26, 2018 @04:42PM (#18080081)
It's not really the developers installing their own toolchain you have to worry about here, though. The folks working on the official builds and deployment should be far more aware of what's happening, because that's what has to be supported. If you're letting B&D do things willy-nilly, that's a serious business problem.

I aware they're often the same folks (DevOps), but your senior engineer and/or project manager should be watching what's going out.