Six Dumbest Ideas in Computer Security

Re:Six Dumbest Ideas in Computer Security by bawolff on Monday July 15, 2024 @03:28AM (#40965901)

> As a result, we’re continually seeing negative externalities from these disclosures in the form of active exploitation.

That assumes that without these disclosures we wouldn't see active exploits. I'm not sure i agree with that. I think bad actors are perfectly capable of finding exploits by themselves. I suspect the total number of active exploits (and especially targeted exploits) would be much higher without these disclosures.

[ Parent | on HN ]

Re:Six Dumbest Ideas in Computer Security by ericpauley on Monday July 15, 2024 @05:48AM (#40966453)

Both can be true. It’s intellectually lazy to throw up our hands and say attacks would happen anyway instead of doing our best to mitigate harms.

[ Parent | on HN ]