2026-09-20 20:35 UTC
@valorin@phpc.social From whom are they being protected? Who is the target audience for a report?
I've seen places where "the report" goes only to Security, who then drip-feed demands for fixes to be performed around the business. I feel they'd like more restrictions.
I'd prefer to dump the whole report on the technical people in one go, allowing the full "devsecops" response to find workarounds if they're quicker than fixes.
Replies (1)
-
@valorin@phpc.social 2026-09-21 01:07
@yojimbo@masto.hackers.town > From whom are they being protected? Protected from someone finding their way into my system and accessing my client's details and vulns. > Who is the target audience for a report? Whoever my client gives access - usually we set up a channel with the dev team, and I report findings directly to them. I don't think I've had a client gatekeep my work from their team before.