News for hackers. Stuff that matters.

A comment on NSA Kubernetes Hardening Guidance [pdf]. Parent comment

Re:NSA Kubernetes Hardening Guidance [pdf] by tinco on Tuesday August 03, 2021 @04:04PM (#28053483)
If your threat profile says you need to audit your vulnerability scanners, you audit your vulnerability scanners. There's not really a problem there right?
[ Parent | on HN ]
Re:NSA Kubernetes Hardening Guidance [pdf] by Pokepokalypse on Tuesday August 03, 2021 @07:02PM (#28055330)
NIST also says: if your scanner finds a vulnerability, it's up to you to VALIDATE that it's not a false-positive.

False-positives abound on these scanners.

[ Parent | on HN ]
Re:NSA Kubernetes Hardening Guidance [pdf] by haolez on Tuesday August 03, 2021 @06:03PM (#28054790)
I've never had to. I wanted feedback from people who have.
[ Parent | on HN ]