Mastodon Feed: Post

Mastodon Feed

kornel ("Kornel") wrote:

Dear bug reporter: please don't be an asshole, and don't file CVEs for bugs.

There is an Overreaction Industry built on these reports. Even if you try to file an honest #CVE for something, they'll twist it into automated scaremongering.

Please please please, don't participate in any program using CVSS. It's unfixably broken.

https://daniel.haxx.se/blog/2023/06/12/nvd-damage-continued/