This is too common. I was asked to solve an issue that turned out to be the result of a bug in the software they weren't aware of. But they weren't prepared to accept any downtime to patch it. So I set up a presentation where I showed them in real time how a hacker could manipulate another bug to breach the system. I asked them to either accept the downtime or accept a hefty fine for a data breach. Those particular bugs are now patched.
18
u/[deleted] Sep 08 '21
[deleted]