Re:GitHub waited 3 months to notify about potential compromise
by _7gt4 on Friday June 17, 2022 @02:29AM
(#31774745)
I think it's not a matter of not wanting to pay, but not wanting to have your departments "we had to pay someone to fix your security bugs" metric go up.
That's also likely why issues in the core product are taken more seriously.
That's also likely why issues in the core product are taken more seriously.