• 0 Posts
  • 10 Comments
Joined 1 year ago
cake
Cake day: June 16th, 2023

help-circle
  • There’s a give-and-take here, where disclosing the vulnerability should be done soon enough to be responsible to affected users, but not so late that it’s seen as pandering to the vendor.

    We’ve already seen how much vendors drag their feet when they are given time to fix a vuln before the disclosure, and almost all the major vendors have tried to pull this move where they keep delaying fix unless it becomes public.

    Synology hasn’t been very reactive to fixing CVEs unless they’re very public. One nasty vulnerability in the old DSM 6 was found at a hackathon by a researcher (I’ll edit and post the number later), but the fix wasn’t included in the main update stream, you had to go get the patch manually and apply it.

    Vendors must have their feet held to the fire on vulns, or they don’t bother doing anything.










  • non_burglar@lemmy.worldtoFuturama @lemmy.worldThoughts so far
    link
    fedilink
    English
    arrow-up
    14
    arrow-down
    1
    ·
    3 months ago

    Everything after season 5 is hollow, like the jokes are being written with a laugh track in mind. Its just not as clever. This season is no exception.

    Consider Old man Waterfall defending Zoidberg: “I request a Satanic funeral.” “Boooo!” This the culmination of a running joke about American freedom values to “do what you want, but not like that.”

    To season 6 opener: “Professor, my Fry-fro…”