grepknfss

5 ms·

1. 1.▲
   by grepknfss 3y ago

   I think giving a patch its own identity is a pretty neat concept and clearly different than the git approach, so thanks for this example!
2. 2.▲
   by grepknfss 3y ago

   > I'm technically aware, but do I really have the expertise and bandwidth to tell the difference between an actual CVE and one that isn't, for the whole database? I sure don’t. But who does? Who gets paid by whom to make this a
3. 3.▲
   by grepknfss 3y ago

   On the one hand it seems like, if you are reporting a security issue, you should presumably have some kind of PoC. On the other hand we’ve seen plenty of exploits that required chaining a half dozen not-obviously-exploitable issues to achie
4. 4.▲
   by grepknfss 3y ago

   You should make the first instance of “PQRL” in your readme a link to that project.