Skip to content
0
  • Home
  • Piero Bosio
  • Blog
  • World
  • Fediverso
  • News
  • Categories
  • Old Web Site
  • Recent
  • Popular
  • Tags
  • Users
  • Home
  • Piero Bosio
  • Blog
  • World
  • Fediverso
  • News
  • Categories
  • Old Web Site
  • Recent
  • Popular
  • Tags
  • Users
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone
boblord@infosec.exchangeundefined

Bob Lord ๐Ÿ” :donor:

@boblord@infosec.exchange
About
Posts
4
Topics
0
Shares
0
Groups
0
Followers
0
Following
0

View Original

Posts

Recent Best Controversial

  • Hot take (?): No company should be the CNA for their own products.
    boblord@infosec.exchangeundefined boblord@infosec.exchange

    @cR0w @hotsoup Great points! A really great book that describes these incentive structures is Geekonomics by David Rice from 2008. I highly recommend it. David identifies numerous gaps between other sectors and the software sector. It's worth a read!

    Uncategorized

  • Hot take (?): No company should be the CNA for their own products.
    boblord@infosec.exchangeundefined boblord@infosec.exchange

    @hotsoup @cR0w It's true that no system is perfect, but we don't let car makers opt out of filing defect reports, for example. We should ask what types of incentives would create more transparency from commercial software makers. As we see from all those other sectors progress is possible. Which tactics would work best in the software?

    Uncategorized

  • Hot take (?): No company should be the CNA for their own products.
    boblord@infosec.exchangeundefined boblord@infosec.exchange

    @cR0w If we want to improve the safety of software like we have for other sectors, we need to figure out how to build software informed by those truly incredible successes. That road may be long, but we can do hard things! ๐Ÿ’ช

    Uncategorized

  • Hot take (?): No company should be the CNA for their own products.
    boblord@infosec.exchangeundefined boblord@infosec.exchange

    @cR0w How do other sectors handle safety-related product defect notifications? I'm thinking about sectors covering planes, trains, automobiles, food, medicine, etc., all of which have achieved dramatic improvements in safety for both their customers, as well as the general public. ๐Ÿ™

    Uncategorized
  • 1 / 1
  • Login

  • Login or register to search.
  • First post
    Last post