3 ms·
The CVEs aren’t the problem. You are describing the problems related to Vogons who assume all bureaucratic inputs are perfect. All tickets should have an escap
by thephyber 3y ago
The CVEs aren’t the problem.
You are describing the problems related to Vogons who assume all bureaucratic inputs are perfect. All tickets should have an escape hatch where some person with direct experience with the software can report false positives or “not an issue”.
Those are different than the purpose of the article, which is describing the variance of quality of CVE data.