# The Fights We Have to Fight: Fixing Bugs

DevFeed: [The Fights We Have to Fight: Fixing Bugs](<https://devfeed.tech/articles/the-fights-we-have-to-fight-fixing-bugs-37004.md>)

Original publisher: [Read original article](<https://shostack.org/blog/the-fights-we-have-to-fight-fixing-bugs/>)

Author: Adam

Published: 2017-11-08T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [FIRST](<https://devfeed.tech/topics/first.md>), [Microsoft](<https://devfeed.tech/topics/microsoft.md>), [bug](<https://devfeed.tech/topics/bug.md>), [communications](<https://devfeed.tech/topics/communications.md>), [Hacking](<https://devfeed.tech/topics/hacking.md>)

Tags: [bug](<https://devfeed.tech/tags/bug.md>), [communications](<https://devfeed.tech/tags/communications.md>), [hacking](<https://devfeed.tech/tags/hacking.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [psychology](<https://devfeed.tech/tags/psychology.md>), [retrospective](<https://devfeed.tech/tags/retrospective.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

This commentary argues that fixing security bugs, rather than merely finding and filing them, is the true finish line for security work. It presents bug remediation as a communications, organizational, and psychology problem, and discusses prioritization practices aligned with delivery priorities and Microsoft security update priorities.

## Source excerpt

[no description provided]