3 ms·
There are "security researchers" who grep GitHub for the words 'password' or 'secret' and blindly file CVE's if they find any hits.
by patmorgan23 3y ago
There are "security researchers" who grep GitHub for the words 'password' or 'secret' and blindly file CVE's if they find any hits.
- stonogo 3y agoand those CVEs are rejected or revoked. There are bad actors everywhere; they're not a good excuse to stop trying.
- deleted 3y ago[deleted]
- worthless-trash 3y agoThere are -many- software vendors and developers that wont accept or even respond to security researchers. You are absolutely correct.