Hacker News Reader

I expect the business unit that sells "secure" IoT devices, to follow the guidelines from Microsoft Security Response Center, but that is expecting too much I guess.

View on HN

Expecting a Profit Center to follow instructions from a Cost Center is akin to expecting the US Congress to act on advice from the General Accounting Office.

It is a matter of who calls the shots, and what happens when guidelines are ignored.

Given your description apparently on US Gov anyone can get away with not following them, no wonder an US company acts accordingly.

Generally when MSRC files security issues, they tend to get fixed quickly and across not just the current release but previous ones too.

Reply on news.ycombinator.com