3 ms·
This situation exposes some arbitrary and capricious aspects of the CVE process, which in turn devalues the entire system. It makes me personally less likely t
by voakbasda 3y ago
This situation exposes some arbitrary and capricious aspects of the CVE process, which in turn devalues the entire system. It makes me personally less likely to take any of their assessments at face value, and I imagine others will feel the same. That is a net loss for security.
- delfinom 3y agoCVEs have been questionable for awhile as I have seen quite a few over the years that amount to "the attacker already has root on the machine". The problem now, is we are entering a phase of the general IT market due to government mandates and insurers for all kinds of cybersecurity junkware. Following a CVE database and pushing scary CVEs are basically the end result and the overreaction will still be the same as many of the cybersecurity positions are no different than checklist readers since companies don't want to pay for actual engineers or skilled sysadmins.