> you could say "Any user can delete our entire database and steal all of our da... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

happyopossum on April 29, 2016 | parent | context | favorite | on: Infosec's Jerk Problem (2013)

> you could say "Any user can delete our entire database and steal all of our data".

See the problem is that all/most vulnerabilities wind up with this sort of description, which can lead to Bob building up an immunity to it.

orf on April 29, 2016 [–]

Not really though, some do and they should be patched, but only a small subset of vulnerabilities end up with a complete backend compromise.

Things are fucked, but not that fucked.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact