Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://mastodon.social/users/bagder/statuses/113993117968332660">daniel:// stenberg:// (bagder@mastodon.social)'s status on Thursday, 13-Feb-2025 07:16:30 JST</a><a href="https://mastodon.social/@bagder" title="bagder@mastodon.social"><img src="https://gnusocial.jp/avatar/5732-48-20220816094715.webp" width="48" height="48" alt="daniel:// stenberg://" style="position: absolute; left: 0; top: 0;">daniel:// stenberg://</a></section><article><p>I love it when my blog posts are read by the right people:</p><p><a href="https://daniel.haxx.se/blog/2025/01/23/cvss-is-dead-to-us/comment-page-1/#comment-27130" rel="nofollow">https://daniel.haxx.se/blog/2025/01/23/cvss-is-dead-to-us/comment-page-1/#comment-27130</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/4555183#notice-8917902">In conversation</a><time datetime="2025-02-13T07:16:30+09:00" title="Thursday, 13-Feb-2025 07:16:30 JST">about 9 days ago</time> <span>from <span><a href="https://mastodon.social/@bagder/113993117968332660" rel="external" title="Sent from mastodon.social via ActivityPub">mastodon.social</a></span></span><a href="https://mastodon.social/@bagder/113993117968332660">permalink</a><h4>Attachments</h4><ol><li><label><a rel="external" href="https://gnusocial.jp/attachment/4127120">Nick LealiHi Daniel. We've talked about this in the CVSS SIG. CVSS cer-
tainly isn’t perfect. We are actively discussing guidance
about how library maintainers and vendors can provide scor-
ing on a per-platform basis to capture impacts that are more
tailored to different environments. | agree that it’s difficult to
express one CVSS assessment that works for all platforms,
but that’s how the ecosystem has developed. And, sometimes
analysts get things wrong.| encourage anyone to provide feedback to the CVSS SIG
about ways we can improve the standard to work better for
everyone. Please reach out.</a></label><br><a href="https://files.mastodon.social/media_attachments/files/113/993/114/658/783/791/original/b3b09d39f61402db.png" rel="external">https://files.mastodon.social/media_attachments/files/113/993/114/658/783/791/original/b3b09d39f61402db.png</a></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
daniel:// stenberg:// (bagder@mastodon.social)'s status on Thursday, 13-Feb-2025 07:16:30 JST daniel:// stenberg://
I love it when my blog posts are read by the right people:
https://daniel.haxx.se/blog/2025/01/23/cvss-is-dead-to-us/comment-page-1/#comment-27130
In conversationabout 9 days ago from mastodon.socialpermalink
Attachments
1. Nick Leali Hi Daniel. We've talked about this in the CVSS SIG. CVSS cer- tainly isn’t perfect. We are actively discussing guidance about how library maintainers and vendors can provide scor- ing on a per-platform basis to capture impacts that are more tailored to different environments. | agree that it’s difficult to express one CVSS assessment that works for all platforms, but that’s how the ecosystem has developed. And, sometimes analysts get things wrong. | encourage anyone to provide feedback to the CVSS SIG about ways we can improve the standard to work better for everyone. Please reach out.
  https://files.mastodon.social/media_attachments/files/113/993/114/658/783/791/original/b3b09d39f61402db.png

Public

Embed Notice

HTML Code

Corresponding Notice