Hacker News new | ask | show | jobs
by nicman23 29 days ago
you understand the concept of zero days ?

companies should be better and if not, criminally liable for their bad code.
2 comments
dist-epoch 28 days ago
I don't think you thought this through.

does this also apply to individual developers?

should Linux Torvalds or the ffmpeg developers go to jail if they merge a RCE zero-day into the Linux kernel or into ffmpeg?

link
nicman23 28 days ago
gross negligence / honest mistake

if you cannot differentiate the 2, :insert rude thing here:

link
dist-epoch 28 days ago
ok, so you agree that if Linus merges code due to gross negligence, for example he was warned in an email that it contains a RCE and he laughs it off, and still merges it, he should go to jail

glad you are consistent in your beliefs

link
lnenad 28 days ago
Ok? I agree with everything. What does that have to do with reporting exploits that don't have bounties?
link