The static analysis, but also software component analysis tooling are really incredibly helpful though and should really contribute to releasing stable products as well -- it's not just here to satisfy your customers management types, it's there to actually make sure your tool doesn't have 5 RCEs active at any point in time.
I for one am happy companies ask about this type stuff, it's basic hygiene to keep control over your product's security, really, and the tooling really makes it a lot easier.
I fail to see the point, as far as I know Apple has been vocal about iOS since WWDC and typically releases the OS relatively quick after events. The beta's been out and available for every iOS developer for months in order to prepare for this.
There's enough to rib on Apple on, but this really doesn't seem like one?
Your example forgets to acknowledge that while there may have been good reasons for people to not be allowed to work remotely, COVID is a very pressing reason to do allow it, and the benefit of allowing people to work remotely vs getting absolutely nothing done or getting fined by the government for forcing people to come in is extremely obvious. So much so that the cons of allowing this have to be put aside, or remediated differently (which in some cases can even require investment).
It's a risk assessment that suddenly tilted the other way.
I don't agree with "everybody should work from the office" sentiments, myself, but I have seen this happen very clearly in many organizations.
I'd argue that if you're writing malicious privilege trampolines for operating systems, you could have very well predicted this would pop up and you get stressed out for it.
It seems a lot of the media is focused on the fact that people are being exposed to the virus. However, the Dutch are adopting a controlled way of doing this while protecting those at risk. All measures to limit contact are in place, in a big departure from what others who claim "herd immunity" are doing.
Any comparison to the (previously?) British approach where in the weekend even concerts weren't cancelled and people are still being forced to go to the office by their employers doesn't quite hit the mark.
Through a newsletter of Panic I came in contact with coda.io. It may not be perfect, but I’ve been loving it recently for simple to medium table usage and programming.
OCSP is a good thing, and the web - and your signed applications - are better off with it.