So apparently I am the only one who think that device manufacturers shipping unsecure devices is not an excuse for an unrelated third party to damage it?
The same as the fact I did not lock my door do not allow anyone to rob my home, that I did not replace my fire detector batteries is no excuse for anyone to set it alight, etc.
To me good security starts by catching this guy and if he had done the damage he claims he had then make him pay for it.
Only when one had been hold accountable for what he has done should we go after companies for negligence, no?
"I discovered this security hole then proceeded to exploit it and damage some random system/workflow for the sake of demonstration" should not be acceptable.
The same as the fact I did not lock my door do not allow anyone to rob my home, that I did not replace my fire detector batteries is no excuse for anyone to set it alight, etc.
To me good security starts by catching this guy and if he had done the damage he claims he had then make him pay for it.
Only when one had been hold accountable for what he has done should we go after companies for negligence, no?
"I discovered this security hole then proceeded to exploit it and damage some random system/workflow for the sake of demonstration" should not be acceptable.