Timeline for Is it legal/ethical to release commercial software with known security flaws
Current License: CC BY-SA 3.0
15 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 10, 2017 at 21:53 | answer | added | dark_st3alth | timeline score: 2 | |
| Jan 10, 2017 at 20:39 | comment | added | Ángel | Not really a sign on whether it is legal or ethical, but big companies are doing this constantly. | |
| Jan 10, 2017 at 20:29 | answer | added | Peteris | timeline score: 3 | |
| Jan 10, 2017 at 19:58 | comment | added | anon | @JesseKeilson - good point. I'll do that. | |
| Jan 10, 2017 at 18:52 | comment | added | David Schwartz | Your company should have a phone number for employees to anonymously report legal or ethical issues to an outside company that your company employees to protect itself. It is likely in your employee handbook. You should take advantage of this in a case like this. | |
| Jan 10, 2017 at 18:50 | comment | added | S.L. Barth is on codidact.com | In addition to what @JesseKeilson says: you can ask to have a question dissociated from your account. To do this, flag your own post for moderator attention and ask for dissociation. You can also change your username on Stack Exchange, but I believe you can do this only once in 30 days... and it provides far less anonymity. | |
| Jan 10, 2017 at 18:46 | comment | added | Jesse K | I should mention that your name is attached to this post, and there's a reasonable likelihood that someone could use this information to figure out your employer, the product you test, and begin probing more closely for the vulnerability you mention. This could potentially be a leak of information that might get you in trouble with your employer or the law. You may wish to redact more information from your post. | |
| Jan 10, 2017 at 18:44 | comment | added | Peteris | Regarding software releases with known vulnerabilities, this quote may be useful: "A new car built by my company leaves somewhere traveling at 60 mph. The rear differential locks up. The car crashes and burns with everyone trapped inside. Now, should we initiate a recall? Take the number of vehicles in the field, A, multiply by the probable rate of failure, B, multiply by the average out-of-court settlement, C. A times B times C equals X. If X is less than the cost of a recall, we don't do one." You can expect a company to apply the same decision process here. | |
| Jan 10, 2017 at 18:30 | comment | added | anon | It will have new enhancements released in the future, and it's already out in the wild. | |
| Jan 10, 2017 at 18:28 | review | Close votes | |||
| Jan 11, 2017 at 1:57 | |||||
| Jan 10, 2017 at 18:15 | comment | added | schroeder♦ | Is it already released with the flaws, or will it be released in the future? I could read your question 2 ways. | |
| Jan 10, 2017 at 17:58 | answer | added | Ubaidah | timeline score: -1 | |
| Jan 10, 2017 at 17:51 | comment | added | schroeder♦ | Legalities are off-topic here (depends on jurisdiction). Ethics becomes an interesting question since they have a plan to remediate. At what speed of remediation would the ethics not be in question? | |
| Jan 10, 2017 at 17:35 | review | First posts | |||
| Jan 10, 2017 at 18:21 | |||||
| Jan 10, 2017 at 17:34 | history | asked | anon | CC BY-SA 3.0 |