4 ms·

I'm the author and would be happy to answer questions to the best of my ability.

• politelemon 4y ago
  There's an immense amount of detail in that post, I'm still reading through it. Do you work in this field or did you research all this as a hobby, or both?
  • jacques_chester 4y ago
    Both. Currently I work in supply chain security with a focus on Ruby. I also spend a lot of time cooperating with others in OpenSSF working groups. I'd had in mind to write about CVSS for some time. I wrote a few paras and created the first plot, but that's as far as I got for about a year. One Saturday morning about 2 months ago I started thinking about it again and got the itch to finish it. It kept growing as I went because I kept finding more to write about. Edit: the original ambition for my site was more about applying what I have learned about statistics, psychology and economics to general software development and ops. But now that my dayjob is mostly thinking about security it has veered off in that direction instead (for the moment at least).
    • politelemon 4y ago
      Thanks for sharing, I always appreciate these insights into fields I often encounter but don't think about. I'll read through it that's a promise!