4 ms·
> To boot https://www.securityfocus.com/bid/109304 https://www.securityfocus.com/bid/109304 claims all versions are vulnerable and the vendor reported it Of co
by jbk 7y ago
> To boot https://www.securityfocus.com/bid/109304 https://www.securityfocus.com/bid/109304 claims all versions are vulnerable and the vendor reported it
Of course, we never reported such a thing: a security issue in a 3rd party library, fixed more than 16months ago. And VLC binaries were updated 16months ago too...
The issue is that MITRE is not doing its job when assigning the CVE or even checking the validity of the claim. But they refuse to talk to us. Why?
- dsfyu404ed 7y ago>But they refuse to talk to us. Why? Because stonewalling is SOP for government bureaucracies when they screw up. When you're the government the various systems the people you screwed have for recourse work slightly differently so stonewalling works better than spewing out a ton of deny and distract PR like corporations do.
- majewsky 7y ago> Because stonewalling is SOP for big orgs when they screw up. FTFY A lot of people seem to be under the impression that when you just privatize a government agency, it magically becomes better. It doesn't.