3 ms·
t.b.h. all this tells me is that your pentesters are bad.
by NovemberWhiskey 3y ago
t.b.h. all this tells me is that your pentesters are bad.
- cyberpunk 3y agoBingo. We don't get to choose them, though, and they hold the strings on the certifications that our business needs. Sometimes it's easier to bend.
- attentive 3y agoIf they make a claim that some package has CVE and you can demonstrate that to be false as per official distro changelogs etc they can go hike.
- _ea1k 3y agoThe problem is that if they don't fix the tool, you'll get to tell them that every week (or however often they scan). Dealing with bad security audits isn't fun.
- bonzini 3y agoYou used to pay Red Hat, did you try passing them the hot potato?
- mshook 3y agoPretty much but that's my experience as well, I made the same comment above...