Yeah, you'd have to actually do your fucking job.
It's not up to one that did the fuck up to decide when people affected by the fuckup gets to know it happened.
It's not up to one that did the fuck up to decide when people affected by the fuckup gets to know it happened.
I live in a country whose law explicitly protects the freedom of action. You can choose what you want to do and exceptions need good justification. The justification has to be a great deal better than "didn't do your fucking job" because the requirements on the fucking job are set out by contracts. Vendors and customers decide on the contracts between them.
That’s what the language requires. I don’t really care what contracts you have with people, if your software has an actively exploited bug in it, people should know.
There has to be nuance. Things that might _literally_ kill people probably shouldn't be reported the in the same way as a bug in a 15-year-old ink-jet printer driver.
The problem is, its actively being exploited. You're just keeping systems and people uninformed and unable to make mitigations.
Who would you require, by law to inform people?