csmeu

Professionalism is thinking and understanding before you start firing a gun at your infrastructure, testing stuff and not shooting client SLAs.

We do that bit between the CVE being announced and patching ahit, not when the press goes ape shit.

So, that's overrated is it?

I wasn't being sarcastic.

Adding a tagline, media friendly name or keywords is unprofessional. Simply, severity is then ranked by how popular the press or security bloggers can market the word, not by the respective severity of the CVE. Its a popularity contest, nothing more.

As someone who deals with every damn sensationalist story at a financial company, having every fucking client phone up about every damn marketoid creation even if it doesn't affect our platform detracts from doing real work.

Let's play their trick:

Its the X Factor of security.

I'm glad the moderator removed GHOST from the subject line. CVEs don't need a media friendly handle.

Edit: Its back again. Booooo.

Actually we like to switch providers a lot to snag the best deals.

Are you sure that its not that the first site they hit which is a false positive causes them to opt out?

ThinkPad wiki is the one comedic false positive I get when I was testing Sky's offering (to determine workarounds in case this shit becomes mandatory one day).

That probably isn't architecture independent.

Ex-acorner here. Repton 2 was my favourite game at the time. Elite actually took a back seat to that and inline assembly programming in BASIC and crudely wiring Lego cranes and trains to it. A friend and myself were the two man demo team on school opening evenings.

The beeb was and still is the peak of computing for me. I capitalised on lots of them being chucked out from my school in the early to mid 1990s. Must have had about 30 of them and piles of disk drives and hundreds of disks but alas they're all gone via ebay now.

Occasionally I fire up BeebEm but that's it now :(