Elektrine lite

← Feed

Matt "msw" Wilson

msw@mstdn.social

<p>Socio-technical Systems Engineer at <a href="https://mstdn.social/tags/Amazon" class="mention hashtag" rel="tag">#<span>Amazon</span></a> | Free and Open Source (#FOSS) Advocate | he/him/they/them | Opinions: my own</p>

Posts

  • View post

    For folks who are thinking about locally patching open-source software to fix what they think is a bug (_especially_ if they think it&amp;#39;s a security vulnerability), I think that&amp;#39;s a path to https://www.xkcd.com/424/ #InfoSec #CVE #OpenSource #Mythos #Glasswing #OpenSSF

  • View post

    Anyone else noticing that more and more people are saying &amp;quot;responsible disclosure&amp;quot; rather than &amp;quot;coordinated vulnerability disclosure&amp;quot; these days? It feels like a regression. Thought we moved past this. #InfoSec #CVE #CVD #PSIRT #SIRT

  • View post

    RE: https://abyssdomain.expert/@filippo/116781705785046708 Sometimes the response to a software defect that is discovered, fixed, and disclosed as a &amp;quot;security vulnerability&amp;quot; has a far worse effect than the defect itself. There was never any indication that this static analysis discovered bug in OpenSSL was likely to be exploited. #InfoSec #CVE #OpenSSL #OpenSource

  • View post

    https://www.linkedin.com/feed/update/urn:li:activity:7474877518731468800/ #CVE #Patching #InfoSec #OpenSource