Zoom Security Exploit: Cracking private meeting passwords

Re:Zoom Security Exploit: Cracking private meeting passwords by amlozano on Wednesday July 29, 2020 @09:18PM (#23993344)

As someone who is pretty much an app sec engineer, I feel like this rings true.

Furthermore, part of me suspects that the tangible business risk of application security flaws isn't felt until after a breach, when its far too late to change things. Even then, sometimes the cost of a breach does not justify the expense of building a robust secure software development life-cycle.

[ Parent | on HN ]

Re:Zoom Security Exploit: Cracking private meeting passwords by SpelingBeeChamp on Thursday July 30, 2020 @03:39AM (#23995618)

That's a great point. Do you believe that the regularity of significant breaches has cheapened the reputational cost of having experienced such a breach? (Which, in turn, makes it less likely that "a robust secure software development life-cycle" will ever be built.)

[ Parent | on HN ]

Re:Zoom Security Exploit: Cracking private meeting passwords by amlozano on Friday July 31, 2020 @12:56AM (#24005799)

I think its worse than cheapening the reputational cost, it has put a concrete ceiling on the financial cost - something like users affected * 2 years of free credit monitoring.

[ Parent | on HN ]