On: Security is not part of most people's jobs

[karmajunkie]

i get the cynicism but all you’re talking about is legalized extortion.

[ErikBjare → karmajunkie]

What part of it is extortion?

[r2_pilot → ErikBjare]

Presumably the part where the red team gets its funding, or by legally mandated remediations that the company may not feel are necessary.

[Buttons840 → r2_pilot]

I'm this scenario the "things the company may not feel is necessary" are good security practices and security fixes, right?

I feel this is a good place to reiterate my "currently we sacrifice national security for the convenience of companies" argument.