4 ms·
> The current state of CVEs and CVE scanning is that you'll have to wrangle with bullshit security reports if you run any nontrivial software. Especially if yo
by mnd999 6y ago
> The current state of CVEs and CVE scanning is that you'll have to wrangle with bullshit security reports if you run any nontrivial software.
Especially if you have customers who outsourced their infosec to the lowest bidder who insist every BS CVE is critical and must be fixed.
- whydoyoucare 6y agoThis ^^^. I have experienced it first hand for the last year or so, and it gets really annoying!