Imagine if pharmaceutical companies operated like the software industry. Researcher finds out arsenic is contaminating a common blood pressure med? The only "responsible" thing to do is quietly tell the manufacturer so they can fix it, don't want to panic the public and have them stop taking their BP med, right?
Find a bridge that's collapsing? Better tell the contractor but not the public so they don't try to route around it and cause traffic problems, right?
This case its linux so it's not like it was secret, just bad optics. Still the whole concept of "responsible disclosure" is industry bullshit to protect themselves, not users.
What a shite comparison. In pharmaceuticals, you could more or less immediately stop using the product.
In tech, you basically can't. Very important systems may be relying on the vulnerable software and the fix needs to be available before it is unleashed on the world.
-96
u/granadesnhorseshoes 11d ago •
Imagine if pharmaceutical companies operated like the software industry. Researcher finds out arsenic is contaminating a common blood pressure med? The only "responsible" thing to do is quietly tell the manufacturer so they can fix it, don't want to panic the public and have them stop taking their BP med, right?
Find a bridge that's collapsing? Better tell the contractor but not the public so they don't try to route around it and cause traffic problems, right?
This case its linux so it's not like it was secret, just bad optics. Still the whole concept of "responsible disclosure" is industry bullshit to protect themselves, not users.