Comment by anonymous908213
8 hours ago
I could do without every memory bug getting a cute sensational name and marketing push, I have to say.
8 hours ago
I could do without every memory bug getting a cute sensational name and marketing push, I have to say.
We should start naming them like hurricanes: NIST creates a list of alphabetical names and assigns any CVE >= 9.0 with a name. Vulnerability Alex (CVE 9.4)
Vulnerability Zzyzx in a week
Tomorrow
[dead]
CVE scores are already inflated because it looks good for their discoverers.
"Oh man, Jan really ruined my weekend."
I actually kinda like how that works.
CVSS is a terrible proxy for vulnerability real world impact. Not to mention, that CVE with CVSS 10.0 in Bob's Flower Names library with 5 users is probably not that important.
that ship sailed a while ago. Rowhammer is the first one I can remember
Let's not forget about heartbleed!
Back in the email days the virus authors named them, e.g. YouAreAnIdiot, ILoveYou
1 reply →
That was the first exploit logo I can recall
1 reply →
Rowhammer was kind of special, surely, what with being based on a physical design flaw?