The EU VEP Process (cc @MarietjeSchaake ) https://cybersecpolitics.blogspot.com/2018/02/a-non-debate-on-eu-vep-process.html …
I suspect anecdotal perspectives on bug collision might differ slightly based on whether you're regularly reporting bugs publicly (where you get a certain rate of 'informal confirmation' of collisions across all global vuln-dev work, public or private)...
-
-
... versus finding bugs privately and tracking your own rate of collision with public findings. It's a subtle difference, and obviously neither perspective is in any sense complete, but I think it's important to note that at some level expert perspectives might vary a bit.
-
For sure, and if you want to talk about this over squid-ink martinis at INFILTRATE, then we can have an informal panel on it some night. The way I look at it is: you can tune your bugfinding to avoid collision but you sometimes fail. :(
- 2 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.