Presentation-cve-is-dead Alternatives

presentation-cve-is-dead reviews and mentions

Posts with mentions or reviews of presentation-cve-is-dead. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-09-21.

The Bogus CVE Problem
4 projects | news.ycombinator.com | 21 Sep 2023

Greg Kroah-Hartman (the kernel developer/maintainer) in 2019 gave a presentation about some of the issues with CVEs.
https://www.youtube.com/watch?v=HeeoTE9jLjM
https://github.com/gregkh/presentation-cve-is-dead
New details on commercial spyware vendor Variston
1 project | news.ycombinator.com | 30 Nov 2022
Debugging a Linux network stack crash via a single register value
1 project | news.ycombinator.com | 19 Nov 2021

That said, using this to track how many bugs are introduced each year is problematic. It's often the case that commit A introduces a bug, commit B aims to fix it and says "Fixes: A" but turns out to only be a partial fix, and then commit C completes the fix and says "Fixes: B". Naively, based on the se annotations it would make sense to say "B introduced a bug", but that isn't always the case.
Greg KH discusses this in his talk "CVEs are dead" (video: https://www.youtube.com/watch?v=HeeoTE9jLjM slides: https://github.com/gregkh/presentation-cve-is-dead/blob/mast... ).
A note from our sponsor - SaaSHub
www.saashub.com | 1 Jun 2024

SaaSHub helps you find the best software and product alternatives Learn more →