I once got accused by a person that disclosed a vuln to me that I didn't hide something well enough by calling it a bug. I thought it was perfectly fine to call it a bug, because then I can tell people to please upgrade to get rid of a bug, rather than wait for someone else to find it.
Instead, per their opinion, I should have reworked all the surrounding code, bring in new features and what not. All within the 5-day deadline until they would report to the public.
There is no silver bullet. Only bullets. And people getting hit by them. It's not a great time to depend on software for important things right now.
I once got accused by a person that disclosed a vuln to me that I didn't hide something well enough by calling it a bug. I thought it was perfectly fine to call it a bug, because then I can tell people to please upgrade to get rid of a bug, rather than wait for someone else to find it.
Instead, per their opinion, I should have reworked all the surrounding code, bring in new features and what not. All within the 5-day deadline until they would report to the public.
There is no silver bullet. Only bullets. And people getting hit by them. It's not a great time to depend on software for important things right now.