4 ms·
I wonder if this list is a true indicator of code quality, it would be interesting to also know the amount of code. For instance, one vulnerability/100 lines of
by nkkollaw 10y ago
I wonder if this list is a true indicator of code quality, it would be interesting to also know the amount of code. For instance, one vulnerability/100 lines of code or something like that.
- elchief 10y agoya like in football stats, volume is meaningless, show me the rate
- jaclaz 10y agoWell not really, the data is meaningless anyway because there is not a "severity scale", or "weight", and not even a "probability" sometimes you find a CVE that needs (just invented) the concurrency of a command being issued ona wednesday night between 01:00 AM and 1:07 AM, with full moon, a local access, opening a specially crafted file with an obscure program noone uses ... That would count as a "vulnerability" just like a serious issue that affects all instances of - say - Chrome or Word 2013 installed. As well, what are the effects of the vulnerability (IF exploited)? I mean, one thing is something that - still say - offsets the GPS position of a photo by 2.25 m Eastward and another thing is one that brings on its knees - say - Cloudflare.