Comment on Xfinity waited 13 days to patch critical Citrix Bleed 0-day. Now it’s paying the price

ghostpony@infosec.pub ⁨9⁩ ⁨months⁩ ago

• virku@lemmy.world ⁨9⁩ ⁨months⁩ ago

  In Europe this would be a hard to explain breach of GDPR. Which could result in some hefty fines. Especially if it is a vulnerability they knew about but chose to wait.

  source

  • pastermil@sh.itjust.works ⁨9⁩ ⁨months⁩ ago

    Are they in Europe? My guess is no.

    source

    • kurushimi@lemmyonline.com ⁨9⁩ ⁨months⁩ ago

      Sure, but the point is to bring additional awareness to how consumer-backing laws with actual teeth can bring about positive change, and perhaps to motivate citizens to support similar legislation and legislators who would write it.

      source
  • plz1@lemmy.world ⁨9⁩ ⁨months⁩ ago

    In the real world, fines are a cost carried to the customer. So even with GDPR, the customer is still the loser in the situation.

    source

    • wahming@monyet.cc ⁨9⁩ ⁨months⁩ ago

      Not in the EU. Fines can actually hurt here

      source

      • plz1@lemmy.world ⁨9⁩ ⁨months⁩ ago

        So fines come with a requirement that a company can’t raise prices to recoup them?

        source

        • -> View More Comments
• ColeSloth@discuss.tchncs.de ⁨9⁩ ⁨months⁩ ago

  It’s a bullshit headline all the way around. They may have waited like 9 days to patch it, but the exploit had been shown to be on their system (and many other companies) for several months. Essentially, the extra 9 days after the vulnerability was discovered and a patch existed wouldn’t have mattered much for anything. Ship already long since sailed.

  source