Darakian

@adulau@infosec.exchange Huh, I see. Perhaps it will prove to be academic but I do wonder what the downstream reader is supposed to do when two or more publishers disagree in part or in whole on some advisory. @westonsteimel@hachyderm.io @gcve@social.circl.lu

@adulau@infosec.exchange

Is there any GNA* that is acting as a first mover and demonstrating what “good” looks like? I suspect that this sort of effort will run into disputes relatively quickly and disputes tend to require judgement and grace to resolve. My thinking is that the only records people will bother to “fix” will be ones the publisher did poorly on.

• I’m assume GNA is roughly analogous to a CNA from the cve system. Please correct me if I’m wrong.

@westonsteimel@hachyderm.io @gcve@social.circl.lu

@adulau@infosec.exchange @westonsteimel@hachyderm.io @gcve@social.circl.lu The looks great, but where does this validation and conflict resolution take place?

https://www.jefftk.com/p/ai-is-breaking-two-vulnerability-cultures

@gregkh@social.kernel.org I spy some rust books back there 👀 Very cool machine. Which model(s) are you running on it?