points by farisght 3 days ago | 0 comments
I wish these blog posts included statistics on the categories of deficiencies that cause these vulnerabilities, and proposed measures to avoid them
A system that admits THOUSANDS of such vulnerabilities is certainly flawed in several fundamental aspects
[–] esseph 3 days ago
[–] jethro_tell 3 days ago
It sounds like they can’t go through them all enough to have that data yet.
So you have to chunk it down to workable pieces, and then if you collect enough data of that process you can look at higher level stats.
Same for every other existing piece of software, btw.