Hacker News new | past | comments | ask | show | jobs | submit login

They get old and crusty when you have to choose not to patch, or de prioritize those not so serious bugs because the operational cost is too high.

Developers shouldn't have to make this call, the cost should be zero.




I think you're making all sorts of assumptions and extrapolations here that I'm not really seeing any hints of. What I see is that someone is responsible for dealing with CVEs, judges its severity as they come in, and concludes that a lot of them are just cruft and not really worthy of a CVE as such. Nothing more, nothing less.


I see your point




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: