Posts tagged: security
3 posts
-
The Window and the Bet
The 90-day disclosure window encodes a bet about attacker velocity. Automated vulnerability discovery has partially invalidated it.
-
The Disclosure Trap
A detection scheme that works by adversary ignorance must be announced to achieve adoption. The announcement is the concession.
-
Support as Attack Surface
When a support interaction can be spoofed with a VPN and a chat message, the password isn't the weak point. The assumption of trustworthiness is.