4 ms·
What I'm also seeing is a knee-jerk reaction to COTS/OSS software, and people using these scores to justify building software in-house. Can't be vulnerable if y
by touisteur 4y ago
What I'm also seeing is a knee-jerk reaction to COTS/OSS software, and people using these scores to justify building software in-house. Can't be vulnerable if you're not in vulnerability scanners, right?
Which seems a bit weird, as they wouldn't have paid a cent before for security auditing OSS codebases.