4 ms·
I'm curious how applicable these are, in general? Feels like pointing out that using interior doors in your house misses out on the security afforded from a va
by taeric 2y ago
I'm curious how applicable these are, in general? Feels like pointing out that using interior doors in your house misses out on the security afforded from a vault door. Not wrong, but there is also a reason every door in a bank is not a vault door.
That is, I don't want to devalue the CVE system; but it is also undeniable that there are major differences in impact between findings?
- skrebbel 2y ago> I don't want to devalue the CVE system You could, though. It's 99.9% stuff like this!
- lpapez 2y agoIn my experience, most CVEs are reports about ice cream trucks lacking nuclear-proof bank vault doors.
- rlpb 2y agoSure, but jq is very much a "front door" in your analogy. You'd have to look at each individual CVE to assess the risk for your specific case, but for jq, claimed security vulnerabilities are worth paying attention to.