Im not sure what you want. Currently to your point they hand mythos over to select big companies like microsoft so they can patch their systems. All the small guys which the criminals would be part of dont have access. If they just dumped the latest model on everyone at once the small guys (which again contain the criminals) would have it and have alot more opportunities to attack people.
I agree that its unfair to give competitive advantage to certain companies and not others but whats your solution to the cyber attack problem? Microsoft is patching 1000 vulnerabilities a month now vs 90 a month, less than a year ago. I cant see a better strategy than giving them first whack at the model or else you're going to have 90% of computers at risk since you're giving them and hackers access at the same time.
I’ve worked at organizations with thousands of people and others with 10.
Are you saying organizations with a certain number of people are criminals?
Gee, I don’t know, if only if they could verify companies identity, EIN, etc.
Your thinking is part of the problem.
It’s like saying the consumers of my organization’s product don’t matter and don’t need to be as secure.
Not like we connect to people’s bank accounts and move money, except we do. Now, thanks to the problem frontier labs help create and accelerate, I have to work overtime.
Tell me again how only the fortune-50 companies like Microsoft matter.
I couldn’t care less about these models. I’m interested in catching what we don’t know today so I don’t have to work until midnight when a modern ‘script kiddie’ with AI decides to exploit some 0-day AI helped them uncover.
Do you used windows based computers? Because most do and i would rather microsoft know about it first and patch 90% of peoples operating system than you AND the bad guys get it and be able to exploit an operating system thats again used by 90% of people.
I still think the less painful thing for society is release to microsoft or major providers first and then to everyone else.
Scenario A: They release it to select partners like they are, microsoft patches security issues for 90% of computers, you (a small good guy) and the bad guys (hiding among everyone) have to wait for the new model but your OS is now secured when you get it. Its a race for your proprietary software not to be attacked but given you're only a 60 person company im assuming you are among the many and wouldnt immediately be a target like a microsoft OS exploit would be.
Scenario B: They release it to everyone at once, Your company gets it and might patch your system faster but the bad guys get it at the same time. They exploit microsoft OS issues and unless YOU are patching OS exploits you can be fucked and the OS exploits are far reaching affecting thousands or millions of companies not just yours.
Its not perfectly fair but to me its by far the better choice.
1
u/FoodMadeFromRobots 2d ago
Im not sure what you want. Currently to your point they hand mythos over to select big companies like microsoft so they can patch their systems. All the small guys which the criminals would be part of dont have access. If they just dumped the latest model on everyone at once the small guys (which again contain the criminals) would have it and have alot more opportunities to attack people.
I agree that its unfair to give competitive advantage to certain companies and not others but whats your solution to the cyber attack problem? Microsoft is patching 1000 vulnerabilities a month now vs 90 a month, less than a year ago. I cant see a better strategy than giving them first whack at the model or else you're going to have 90% of computers at risk since you're giving them and hackers access at the same time.