Oracle CSO Rant Against Security Experts

Oracle's CSO Mary Ann Davidson wrote a blog post ranting against security experts finding vulnerabilities in her company's products. The blog post has been taken down by the company, but was saved for posterity by others. There's been lots of commentary.

It's easy to just mock Davidson's stance, but it's dangerous to our community. Yes, if researchers don't find vulnerabilities in Oracle products, then the company won't look bad and won't have to patch things. But the real attackers -- whether they be governments, criminals, or cyberweapons arms manufacturers who sell to government and criminals -- will continue to find vulnerabilities in her products. And while they won't make a press splash and embarrass her, they will exploit them.