So the Comodo forum was breached due to the vBulletin vulnerability that goes around recently.
They started their statement with:
“At Comodo we take security very seriously and it is our highest priority.”
I imagine the conversation like this: "We screwed up, …" *lawyer checks the text* "We can't write this, we would make us liable in some way for this problem"
Why does our legal system (create the illusion to) punish those who tell the truth?
#legal #infosec #disclosure #philosophy