74 点作者 firebaze10 个月前

2 条评论

fmajid10 个月前

The punchline says it all: “Many bug bounty reports never assign CVE-IDs, leading to a false perception of security and software quality.”

voytec10 个月前

162 comments from 2 years back: <a href="https://news.ycombinator.com/item?id=32548671">https://news.ycombinator.com/item?id=32548671</a>

Ridiculous vulnerability disclosure process with CrowdStrike Falcon [2022]