CVSS is dead to us
daniel.haxx.se
CVSS is short for Common Vulnerability Scoring System and is according to Wikipedia a technical standard for assessing the severity of vulnerabilities in computing systems. Typically you use an online CVSS calculator, click a few checkboxes and radio buttons and then you magically get a number from 0 to 10. There are also different versions … Continue reading CVSS is dead to us →

Daniel Stenberg says the scores are “security misinformation”.

  • treadful@lemmy.zipEnglish
    11·
    2 days ago

    Well, CISA will probably be gone next month so no more need to worry about this.

  • corsicanguppy@lemmy.caEnglish
    25·
    2 days ago

    “security misinformation”

    Or actually significant and consistent values that also happen to make you look bad today so they must suck and be ditched.

    Did I get that right? SOUNDS right…