Correct me if I'm wrong, but 75% of sites with these vulns are still just hanging out there ready to be dumped, according to the end of this post?
Insane.
Some days I think one ought to be licensed to touch a computer.
Insane.
Some days I think one ought to be licensed to touch a computer.
The vulnerability emails probably got dismissed as spam, or forwarded on and ignored, or they’re caught in some PM’s queue of things to schedule meetings about with the client so they can bill as much as possible to fix it.
> Some days I think one ought to be licensed to touch a computer.
There are plenty of examples of fields where professional licensing is mandatory but you can still find large numbers of incompetent licensed people anyway. Medical doctors have massive education and licensing requirements, but there is no shortage of quack doctors and licensed alternative medicine practitioners anyway.
Not saying you should do that given the current state of the laws.