News for hackers. Stuff that matters.

A comment on Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” in User-Agent. Parent comment

Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by grrowl on Thursday March 28, 2019 @05:16AM (#19510530)
Absolutely: Cisco made this happen, not Engineer Alice. If your boss asks you to do something within my ethical boundaries and you have 5 tired co-workers in favour of shipping it, eventually you'll break and say "fine". It doesn't make you responsible or the one that pulled the trigger.
[ Parent | on HN ]
Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by empath75 on Thursday March 28, 2019 @08:42AM (#19511586)
The fact that this fix made it to prod tells you that something is deeply deeply broken with cisco’s processes that goes well beyond any individual’s responsibility.
[ Parent | on HN ]
Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by martin_a on Thursday March 28, 2019 @09:03AM (#19511751)
Exactly. It's not like somebody just did this like in a three people startup. There are code reviews and quality management and many more, and this lousy "fix" has passed all those stages and instances. If nobody declined this, there's a serious problem within Cisco.
[ Parent | on HN ]