Comment by dist-epoch
6 hours ago
> Emergency patching. When, if ever, should governments or other operators use a vulnerability to patch systems they own or are authorized to manage after losing administrative access? What safeguards should apply? We can imagine an end-state of internet-wide always-on scanning for known vulnerabilities, and either notifying site owners when one is detected or patching the system.
The wild stuff is at the end. They propose someone (who?) auto-patching even systems they don't own.
> auto-patching even systems they don't own
It's been done before, though I cannot recall specific examples. Maybe as far back as the Morris worm?