News for hackers. Stuff that matters.

A comment on Ring0VBA – Getting Ring0 Using a Word Document. Parent comment

Re:Ring0VBA – Getting Ring0 Using a Word Document by Rygian on Wednesday October 26, 2022 @08:03AM (#33342430)
My opinionated "This Is The Way" stance, as a work in progress:

Daily fines proportional to installed user base, on the basis of confirmed and not yet fixed CVEs. Amount inversely proportional to price of per-user software license (ie. the cheaper the gadget, the heavier the fines). Exception for AGPL-compatible licenses.

Incentives and credits for smaller companies' training and audits. Funded by fines above.

Incentives and credits for companies fixing CVEs on AGPL-compatible software. Funded also by fines above. Amount of incentives proportional to installed user base and severity of CVE.

Audit practices defined by group of international bodies.

[ Parent | on HN ]
Re:Ring0VBA – Getting Ring0 Using a Word Document by badsectoracula on Wednesday October 26, 2022 @11:09AM (#33344889)
> Exception for AGPL-compatible licenses.

What have OpenBSD developers done to you? :-P

[ Parent | on HN ]
Re:Ring0VBA – Getting Ring0 Using a Word Document by Rygian on Wednesday October 26, 2022 @12:04PM (#33345728)
Judging from the score of my comment... they've downvoted me :-)
[ Parent | on HN ]