jimquisition patreon

Podquisition 348: Educated in the Arts

🕑 Added 2021-08-26 16:01:25 +0000 UTC

Comments

Jason Youngberg

Somewhat off-topic, but Weird History released a video recently about the Ford Pinto. As I watched I kept noticing how it mirrored the development of some video games ... except with deadlier consequences. Things like a rush development, refusal of executives to listen to problems, the push to reach unrealistic requirements, reluctance to fix serious issues, etc.

Luna

"You would think that Twitch would care about a vulnerability at that scale". You would think that, yes. But any amount of experience in infosec will show you that corporations actively *do* *not* want to update their vulnerable systems. This resistance to upgrading (really, resistance to change, which absolutely shouldn't surprise you) is why we see so many compromises and attacks. So many breaches are outdated software (not even counting 0 days) or default, vulnerable configs (e.g. admin/admin login/password). I have actually seen a corporation ask a developer to change their product, to lie, so it doesn't report them as vulnerable, just so they don't have to upgrade. An upgrade that would take all of about 10 minutes to do. So no. I wouldn't think Twitch would want to patch the vulnerability.