News for hackers. Stuff that matters.

A comment on UK Government scans all web servers hosted in the UK for vulnerabilities. Parent comment

Re:UK Government scans all web servers hosted in the UK for ... by onetimeusename on Friday November 04, 2022 @02:12PM (#33471357)
I have some doubts. For example, if they are just outputting the scan results from some tool with a high false positive rate, how is that helpful? It's a waste of time and money for the government. Bug bounty programs have the same issue that probably most bugs found are trash results from a scanning tool.

On the other hand, a custom built tool that tries to find the most serious known vulnerabilities with a low false positive rate would probably be a good thing for the government to run.

[ Parent | on HN ]
Re:UK Government scans all web servers hosted in the UK for ... by fao_ on Friday November 04, 2022 @02:32PM (#33471558)
I'd imagine part of the job of the people working there would be to limit the number of false positives.
[ Parent | on HN ]
Re:UK Government scans all web servers hosted in the UK for ... by doubled112 on Friday November 04, 2022 @03:16PM (#33472237)
Could be, but it is certainly not how it works at my org.
[ Parent | on HN ]
Re:UK Government scans all web servers hosted in the UK for ... by ygjb on Friday November 04, 2022 @03:21PM (#33472311)
What scale does your org function at?
[ Parent | on HN ]
Re:UK Government scans all web servers hosted in the UK for ... by pessimizer on Friday November 04, 2022 @03:14PM (#33472207)
So if they use a bad tool, it would be bad, but if they use a good tool it would be good?
[ Parent | on HN ]
Re:UK Government scans all web servers hosted in the UK for ... by onetimeusename on Friday November 04, 2022 @03:34PM (#33472533)
correct. fortunately, the sales person from the security vendor, the media, and the public officials are aware of this constraint.
[ Parent | on HN ]
Re:UK Government scans all web servers hosted in the UK for ... by hsbauauvhabzb on Friday November 04, 2022 @03:24PM (#33472347)
There are no good tools. Just a bunch of shady vendors.
[ Parent | on HN ]