4 ms·
Not related to the article, but the source: Having my email address on my blog is a vulnerability. Another vulnerability is named 'Rudimentary Scan', meaning
by ctz 12y ago
Not related to the article, but the source:
Having my email address on my blog is a vulnerability. Another vulnerability is named 'Rudimentary Scan', meaning 'we looked, and your site has no client-side vulnerabilities'. These issues mean my blog is 'borderline unsafe'. Wut.
Neither of these are vulnerabilities; to call them such does a disservice to your customer's understanding of technical language.
- borski 12y agoSorry, perhaps it's a little unclear. Rudimentary Scan means you ran a scan from our homepage, pre-verification, and we couldn't run our full suite of modules. All that is saying is that now since you're verified you should re-run a scan which will look for quite a bit more. We figured putting it there would be the best way of not giving a false sense of security from our 'rudimentary scan.' We make it 'borderline unsafe' so as to prevent that false sense of security. I can totally understand your confusion, and we should make this clearer. Ideas / feedback are always appreciated. :) The email address is an informational vulnerability, which is dismissible. Does that clarify things? (cofounder of Tinfoil)
- ctz 12y agoIf I were you, I would put the full scan at the end of the setup workflow (straight after verification), so that by the time the user gets to their report, you have full results for them.
- borski 12y agoFeedback appreciated. We're rethinking the whole flow, and we'll definitely try to make sure it's clearer. The intentions were good, I promise. :)