Re:Big Companies Thought Insurance Covered a Cyberattack
by msla on Monday April 15, 2019 @12:10PM
(#19666374)
It might well kill the use of open source and small-company software in business, in that the developers/management behind said code can't pay insurance companies to say that their code will pass audit. Microsoft and Oracle will pass with flying colors, of course.
[ Parent
| on HN ]
Re:Big Companies Thought Insurance Covered a Cyberattack
by jabart on Monday April 15, 2019 @12:59PM
(#19666818)
Doubt it, there are a lot of PCI Compliant businesses that get audited with open source software in their systems. I'm sure they have a node_modules somewhere on their build server.
When you have an attack that moves from your servers to your desktop computers, you have a network issue, which would be covered in an audit to verify you properly segment your network instead of having it in one large broadcast domain.
Re:Big Companies Thought Insurance Covered a Cyberattack
by bluejekyll on Monday April 15, 2019 @12:47PM
(#19666707)
It could just as well lead to better support models for contributions to fix and audit open source.
The open source model is benefiting too many businesses to just up and throw it out.