The connection was lost. Trying to connect again.

khm

@khm@hj.9fs.net View on hj.9fs.net
slacker / overachiever

supercomputing engineer at a national lab.
no, a different national lab.
part-time bureaucrat.
threat influencer.
I put two spaces between sentences and there's nothing you can do to stop me.

"His personality is forceful but not objectionable" -- Tri-City Herald

this bio has been reviewed and approved by a preeminent fedi bio authority
Website
https://sciops.net
pronouns
he/him
  • 3 posts
khm @khm@hj.9fs.net
Samsung Semiconductor has registered itself as a CVE numbering authority. Can't wait to see their album drop.

ALSO:

The Linux Foundation has registered ANOTHER CVE numbering authority, but they call it "Akrites Foundation," most of their security policy seems to be slop, and they registered their official policy document as a link to an outdated fork of the actual repo, in a dazzling display of exactly the kind of careful and detail-oriented work you want in a security response org. Truly impressive, very trustworthy

(archive link of the CNA page linking to neither the actual repo nor the 'canonical url')
The public GitHub home of the Akrites Security Incident Response Team (SIRT) - pedrohc/SIRT GitHub SIRT/docs/Akrites_CVD_Policy.md at main · pedrohc/SIRT The public GitHub home of the Akrites Security Incident Response Team (SIRT) - pedrohc/SIRT

· Public · edited