Re:How to gain code execution on hundreds of millions of peo...
by bashback on Saturday March 01, 2025 @03:35AM
(#43217296)
The problem is that this entire sclerotic industry is so allergic to accountability, that, if you want people to start, you probably have to fire 90% of the workforce. If it were up to me, the developers responsible for this would never write software "professionally" again.
Re:How to gain code execution on hundreds of millions of peo...
by zx8080 on Saturday March 01, 2025 @06:10AM
(#43218155)
The industry (or a couple of generations currently inhabiting it) could start with at least accepting responsibility when something goes wrong. Let me be clear: it's not about ending the "blameless culture" in engineering. No. It's about ending the culture of not taking any responsibility at all, when things go south. See the difference.
What?! It's not some kind of joke. This could _already_ literally kill people, stole money and ruin lives.
It isn't even an option to avoid taking reaponsibility for the decisions which lead to security and safety of users for any app owner/author.
It's as simple as this: no safety record to 3rd party - no trust, for sure. No security audit - no trust. No transparency in the audit - no trust.
Failing to make the right decision does not exempt from the liability, and should not.
Is it a kindergarden with "it's not me, it's them" play? It does not matter who failed, the money could has been be stolen already from the random ones (who just installed an app wrapped with this todesktop installer), and journalists could have been tracked and probably already killed in some dictatorship or conflict.
Bad decisions does not always make the bad owner.
But don't take it lightly, and don't advocate (for those who just paid you some money) "oh, they are innocent". As they are not. Be a grown-up, please, and let's make this world better together.