I suspect the idea is to juice MTTP rates with, idk, making AGI do it.
Fact is, there are vulnerabilities, on internet-exposed gear, operated by USG, that are under active attack. It's hard for anyone to say "well okay, patch whenever you get around to it." I get that's also a bad response.
I just worry about the process effect of missing a deadline making missing it forever more attractive.
And I really want some (public) data on this. A/B test it? Give some comparable agencies short vs long deadlines, see what effects the deadline itself has on patch rates a month out?
Tod Beardsley
npub1qz…6rvyk
2026-06-14 21:50:31 UTC
in reply to nevent1q…f2ds
Author Public Key
npub1qzuk6k5w9ajvltt2f56pgy52uwddsf53ngmzqza6g9367jyc8cmsc6rvykSeen on
wss://relay.momostr.pinkPublished at
2026-06-14 21:50:31 UTCEvent JSON
{
"id": "99703bde0f3455761f20d84d4fe2ad70b62a3935543766860476f312c8f01e02",
"pubkey": "00b96d5a8e2f64cfad6a4d3414128ae39ad826919a36200bba4163af48983e37",
"created_at": 1781473831,
"kind": 1,
"tags": [
[
"p",
"2b19258c310db560e1baf80e02ef506049387a6e833226bf33805e2f7572ddf9"
],
[
"p",
"00b96d5a8e2f64cfad6a4d3414128ae39ad826919a36200bba4163af48983e37"
],
[
"p",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"e",
"b85e09b1885b24479428a833d9f028878723e3fe181e765af7a6a850d7f65d96",
"",
"reply",
"2b19258c310db560e1baf80e02ef506049387a6e833226bf33805e2f7572ddf9"
],
[
"proxy",
"https://infosec.exchange/@todb/116750668999712696",
"web"
],
[
"e",
"b318b565e0027f78f0795c2d6db8d8940d5bf68e3c57856a8a9c6a7019381472",
"",
"root",
"00b96d5a8e2f64cfad6a4d3414128ae39ad826919a36200bba4163af48983e37"
],
[
"p",
"9404f87e2fa885d19f687eaf30ab240dbd19115d2b3131a72ae325026981f218"
],
[
"proxy",
"https://infosec.exchange/users/todb/statuses/116750668999712696",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/todb/statuses/116750668999712696",
"pink.momostr"
],
[
"-"
]
],
"content": "I suspect the idea is to juice MTTP rates with, idk, making AGI do it.\n\nFact is, there are vulnerabilities, on internet-exposed gear, operated by USG, that are under active attack. It's hard for anyone to say \"well okay, patch whenever you get around to it.\" I get that's also a bad response.\n\nI just worry about the process effect of missing a deadline making missing it forever more attractive.\n\nAnd I really want some (public) data on this. A/B test it? Give some comparable agencies short vs long deadlines, see what effects the deadline itself has on patch rates a month out?",
"sig": "a5a9b975eb38b45bf0fa77d7c8b4d35815c3045cfcfa2b34b91414e98c98725d252515e3d46a62ed05f3f7d83d3a69c233673a6022c3568d02dbdf50921bffd0"
}