News for hackers. Stuff that matters.
Re:Third High Severity CVE in Log4j Is Published by staticassertion on Saturday December 18, 2021 @05:07PM (#29609026)
Yes, some organizations have so much technical debt that any security work is going to take extraordinarily large amounts of work.

That's a bummer, but I suspect many on HN can in fact build software that isn't total garbage.

Re:Third High Severity CVE in Log4j Is Published by aidenn0 on Saturday December 18, 2021 @06:38PM (#29609837)
Doing it right sometimes pays off in the long run, but cutting corners always pays off now.
Re:Third High Severity CVE in Log4j Is Published by ChuckNorris89 on Sunday December 19, 2021 @06:35AM (#29613153)
Exactly. Managers and execs love pointing out the cost savings they made this year or this quarter. By the time the chicks start to hatch "in the long run", they most likely would have already moved to another enterprise so someone else has to clean up their mess. And by clean up, I mean repeat exactly the same mistakes since nobody promotes you for implementing stuff that might show its benefits in the long run.
Re:Third High Severity CVE in Log4j Is Published by paledot on Sunday December 19, 2021 @09:35AM (#29614238)
Also one of the root problems with politics. 2035 emissions targets are the next government's problem. Rehabilitative policing pays off in 20 years, retributive buys voters now.