[loop22]

> No damage-control lawyerly BS, no 'ego'

And no cutesy name for the vulnerability

[xwolfi]

The "Dragon Eater Vulnerability", that all managers will agitate about mitigating for the next 4 weeks...

[d-z-m]

SillyPutty

[SV_BubbleTime]

Canon now.

[rustcleaner]

Seconded.

[Sohcahtoa82]

I think named vulnerabilities are useful when it's a "STOP THE WORLD" kind of vulnerability like Heartbleed and Shellshock. It's much easier to talk about Heartbleed than "CVE-2014-0160".

The problem, IMO, is when medium-severity vulnerabilities are given names, like Terrapin. I think it makes people think a vulnerability is much worse than it really is.

[itsTyrion]

Heartbleed was a decade ago? JFC I’m getting old