CVE-less vulnerabilities
CVE-less vulnerabilities
Posted Jul 17, 2019 18:22 UTC (Wed) by nix (subscriber, #2304)In reply to: CVE-less vulnerabilities by Wol
Parent article: CVE-less vulnerabilities
Oh, I completely agree (I was in the same boat for fourteen years). But that's being incentivized by *something else*, and money is just something to let you eat while you do the something else. If you had enough money to do the something else, would you want more money for the sake of it? If not, you're not incentivized by money, I'd say. (An amazing number of people *are* incentivized by it: I don't understand what they get out of it, maybe they use it to keep score or something primate-status like that?)
Posted Jul 20, 2019 11:05 UTC (Sat)
by jospoortvliet (guest, #33164)
[Link]
CVE-less vulnerabilities
On top of that I want to challenge the perverse incentive a bit. Yes, it is there, but Red Hat also wants it’s software to be popular and used a lot, otherwise it had no large user base to draw customers from. So it isn’t a 100% bad incentive - it is ‘complicated’ and I’d argue it kind of balances out.