Cybersecurity and Infrastructure Security Agency urges affected users to update ASAP.
Yeah, if you’re not applying updates at least once/month, you’re just irresponsible and probably deserve to get hacked.
Normally I would say that nobody deserves to be hacked. But now my perception of the situation has changed.
If viewed like a bank and my data is the money in it, then what’s happening mostly is that my money gets stolen. After getting found out the bank says “We’re sorry ;)”; the bank might even get insurance money, while I get multiple attempts at accessing my accounts at other services.
Now I would like to see this gross negligence punished. Preferably by a 4x2 to the head. Or cat-o-ninetails.
Exactly. If you run a service, the bare minimum due diligence is to install available updates in a timely manner. Imo, it’s criminal negligence if a service gets hacked due to an unpatched system.
Most likely, this isn’t being done because the IT dept isn’t given enough time to actually maintain systems, so whoever makes that decision should face criminal charges. And orgs like the NSA should be auditing this kind of thing and issuing fines, not spying on US citizens.
