7 ms·

One where customers have their own scanners, and their unfounded panic overrides logical analysis by the engineers and admins. We’ve had to patch plenty of stu

One where customers have their own scanners, and their unfounded panic overrides logical analysis by the engineers and admins. We’ve had to patch plenty of stupid “security” bugs just to satisfy a paying customer.

pylua 4mo ago
This is the real answer to the op. It’s incredible how overblown these sorts of things can become
- inigyou 4mo ago
  If the customer can run the scanner and find the vuln, that means they can log in, right? Which means they can RCE.
  - pylua 4mo ago
    Not always, it can be run at static code analysis or the container repository (not the prod one)?