Lots of people using "sparse" vs "dense" to reason about vulnerability research recently, but I'm not convinced that it's a useful exercise
-
@benhawkes I tried to pick this apart in a post to dailydave using vsftpd as an example. https://lists.immunityinc.com/pipermail/dailydave/2014-November/000813.html …
@benhawkes I think you're nearly right, it has everything to do with pace of software development. When feature dev slows, bugs trend down.
-
-
@benhawkes this is easy to grasp when you look at sw written against a spec, like FTP. It's just "done" at some point. -
@dguido I'd add that thoughtful compartmentalization can give a defensible (limited+stable) attack surface even where dev velocity is high. - 5 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.