Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3
by postmodern_mod3 on Monday January 28, 2013 @07:35PM
(#5131660)
Vulnerability counts are misleading metric for security. They do not include the vulnerabilities which have not yet been discovered or created.
[ Parent
| on HN ]
Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3
by jpatokal on Monday January 28, 2013 @07:42PM
(#5131677)
And you're proposing to get a less misleading metric for undiscovered or uncreated (!?) vulnerabilities how, exactly?
Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3
by postmodern_mod3 on Monday January 28, 2013 @08:12PM
(#5131790)
Maybe graph the rate of vulnerabilities discovered vs. LoC/files added?
It's safer to only use vulnerability counts as a metric for how interesting software is to security researchers.