• 0 Posts
  • 10 Comments
Joined 1 年前
cake
Cake day: 2023年7月12日

help-circle


  • SexyVetra@lemmy.worldtoPrivacy@lemmy.mlWhy I Lost Faith in Kagi
    link
    fedilink
    arrow-up
    11
    arrow-down
    7
    ·
    3 个月前

    You wish the CEO of a company would harass you?

    You wish a CEO would give general denials and the same non-answers you see in a comment thread while pretending to engage with you in good faith?

    Fuck off, the CEO gave no new info or perspectives and just showed himself to be the asshole that recent emerging evidence had been showing he was.





  • lol and you said you weren’t big mad.

    It’s not a matter of “less or more information[…]”

    Escalating every such bug […] would quickly drown out notices that people actually care about.

    If your argument is that a specific class of security bugs aren’t worth CVEs, then make that argument. Instead, you’re saying the CVE isn’t valid and making an argument about the risk assessment and development lifecycle (as if those aren’t part of a CVE) and not the class of security bug.

    I have, this entire time, said it’s a valid CVE that you don’t care about and that you shouldn’t be working as a cybersecurity professional. You have conceded the first point and continued to demonstrate the later.


  • “Uh, no. The CVE is valid, but it’s not about that.” You say, scrambling. “The dev cycle! It was already scheduled for release, so it’s not necessary to disclose. If everyone disclosed security bugs, we’d have too much information and we wouldn’t be able to filter for the notices we care about.” You retort, not realizing that you had already conceded that this wasn’t about the fact you didn’t care about the CVE, and instead arguing that less information is better rather than building tools to cope with the number of CVEs that are increasing regardless of their relevance to you personally.