Comment by ronsor
5 days ago
> many have memory corruption bugs and incorrect anti-tampering code requiring our per-app exploit protection compatibility mode toggle
Ironic for apps that are often so paranoid about "security" and "hardware attestation"
Because it’s mostly about checking compliance boxes than really caring about security.
Corporation are not able to "care". It's the boxes's fault. That is, legislation and/or enforcement.
By that logic governments are not able to "care" either.
But both are examples of cybernetic entities, if they don't care then their control loops aren't correctly aligned.
Lmao, it's never legislation and/or enforcement. It's the checkboxes that their insurances told them they had to check or they wouldn't be covered. Half of the problem goes back to insurances being thieves who would do anything to not pay up, the other half goes to upper management not giving a shit about people.
1 reply →
This meme again? Corporations are not capable of anything, but corporations are made of people, and people can care.
5 replies →
Its not like govt agencies care about security either. Its just "compliance" bs. Most european eID stuff works like that.
In my experience, banks are among the worst at following email standards. Why would we expect more sophisticated security protections from them?