4 ms·
Frankly, I don't think industry is going to allow soundness issues to ever achieve parity of importance with what we think of as CVEs. There's simply too much c
by mattgreenrocks 3y ago
Frankly, I don't think industry is going to allow soundness issues to ever achieve parity of importance with what we think of as CVEs. There's simply too much code and mindshare around languages that don't worry as much about soundness.
I'm not saying it is right, just that concerns around soundness will likely be hand-waved away. And it is to everyone's detriment.