3 ms·
So basically the CVE numbers are buggy...and simply adding all a the numbers up doesn't tell the whole story.
by jcbeard 11y ago
So basically the CVE numbers are buggy...and simply adding all a the numbers up doesn't tell the whole story.
- tptacek 11y agoThat's not at all the intention behind CVE numbers, so people trying to "add the numbers up" are demonstrating a lack of understanding of CVE, not a problem with it.
- jcbeard 11y agotrue...just playing on words. simply adding up CVE stats silly. actually any of these "top 10" vulnerability lists are idiotic. theres a hell of a lot of layers involved in any system from dozens (perhaps hundreds) of sources that lead to errors (undefined behavior). from the hardware, all the way up through the software stack.