3 ms·
So? That's a different problem to deal with a different way. People keep lying to me, so i'm going to ignore what they tell me and make it up myself doesn't s
by DannyBee 3y ago
So?
That's a different problem to deal with a different way.
People keep lying to me, so i'm going to ignore what they tell me and make it up myself doesn't seem like it's going to generate great results.
Put another way - "NVD making stuff up that is not accurate" is not a solution for "other people making stuff up that is not accurate".
If you want responsibility, you have to incentivize it somehow, whether carrot or stick. This doesn't achieve that. They can tell their customers whatever they want, and then blame any difference on NVD being mean.
- _a_a_a_ 3y ago>> vendors underreporting and underscoring their security issues > So? So he comprehensively refuted your point by explaining why
- tptacek 3y agoNo, he called out the obvious reason why NVD would decide it needs to operate this way, without acknowledging that the process they've come up with doesn't work, and is sort of an industry embarassment.