Anything under an 8
The national vulnerability database is buckling under defunding and volume, which changes what a severity score is actually worth.
Categories
15 pages
Soapbox
Opinion and argument. Where I plant a flag on something and defend it.
The consent you can't ask for
Operational telemetry can be personal data, and a web service has no first-run prompt to ask on. So plumbing is not an answer.
Nobody's coming to clean your supply chain
Signed but poisoned packages show a signature proves who sent something, not what is in it. Nobody is coming to clean this up for you.
The greybeards' edge was never typing
Agentic AI gives senior engineers a lift and juniors a drag, which tempts firms to automate away the entry level entirely.
AI didn't kill curl's bug bounty. The bounty did.
The cash prize for anything that looked like a finding was the accelerant, and AI only made plausible-looking reports free to produce.
