Talk:Vulnerability (computing)

message: I think the section on full disclosure starts out good, showing a balanced view of the topic, but then takes a biased point of view, I myself am generally considered an expert in the security arena that the public listens to and I don't fully agree with full disclosure, its a complicated issue, it should be discussed by all means but the sentence that reads "From the security perspective, only a free and public disclosure can ensure that all interested parties get the relevant information. Security through obscurity is a concept that most experts consider unreliable." onward takes a biased view point on the issue, there are pros and cons to both sides and wikipedia shouldnt be taking sides on this or any contravercial issue --Michael Lynn 23:39, 20 March 2007 (UTC)
replies: text: I agree. Disclosure methods are controversial, prone to bias viewpoints and will proably stay that way for the foreseeable future. I moved that section from its original place in the article (where it didnt belong at all imo) and made a minor change to reduce some of the bias but I think it needs to be completely reworked.  What might work is to have a para on different methods of disclosure (i.e. full disclosure, "responsible disclosure", "pre disclosure etc)").  Even then that can be tricky to write without bias (ex: what is "responsible disclosure").  Dman727 03:05, 21 March 2007 (UTC)
thread_title: Disclosure 

message: it bugs me to see so many links to commercial products here, its not representative of the whole market and even if it was, this is not an advertising venue, its an encyclopedia, can we clean up that garbage? --Michael Lynn 22:14, 13 April 2007 (UTC)
thread_title: advertising

message: I removed this; it was reverted.  Fair enough.  But I hope that a good reference will be added soon, or I'll remove it again.
Memory allocation bugs are a big source of vulnerabilities.  But who calls memory allocation a vulnerability?  Likewise, people screw up all the time with pointers.  But I've never heard the pointers themselves called "a vulnerability."  A potential source of vulnerabilities, sure.
Now, it's entirely possible that during my existence I've just completely missed this use of terminology.  If it is in fact used in practice, please add a reliable reference.  Thanks, WalterGR (talk | contributions) 01:18, 18 March 2008 (UTC)
replies: text: Good point.  Perhaps the appropriate term to use is source of vulnerabilities, or common source of vulnerabilities.  One reference is this work. Derek farn (talk) 02:11, 18 March 2008 (UTC)
thread_title:  A construct in a computer language is said to be a vulnerability when many program faults can have their root cause traced to its use. 

message: This article has been tagged for a long time.  Are there still active disputes?  If so, let's address them.  If not, or no one cares, let's delete any problematic sections of the article, and remove the tags. --Elonka 04:39, 3 August 2008 (UTC)
thread_title: Tags

message: See my comments on Talk:Zero-day attack --AlastairIrvine (talk) 17:58, 10 April 2014 (UTC)
thread_title:  Vulnerability windows and definitions 

message: Hello fellow Wikipedians,
I have just added archive links to  on Vulnerability (computing). Please take a moment to review my edit. If necessary, add  after the link to keep me from modifying it. Alternatively, you can add  to keep me off the page altogether. I made the following changes:
*Added archive https://web.archive.org/20100705110913/http://www.isaca.org:80/Knowledge-Center/Research/Documents/RiskIT-FW-18Nov09-Research.pdf to http://www.isaca.org/Knowledge-Center/Research/Documents/RiskIT-FW-18Nov09-Research.pdf
*Added archive https://web.archive.org/20071021201149/http://blog.mozilla.com:80/rob-sayre/2007/09/28/blaming-the-victim/ to http://blog.mozilla.com/rob-sayre/2007/09/28/blaming-the-victim/
When you have finished reviewing my changes, please set the checked parameter below to true to let others know.
Cheers.—cyberbot IITalk to my owner:Online 09:35, 9 January 2016 (UTC)
thread_title:  External links modified 

message: Hello fellow Wikipedians,
I have just modified one external link on Vulnerability (computing). Please take a moment to review my edit. If you have any questions, or need the bot to ignore the links, or the page altogether, please visit this simple FaQ for additional information. I made the following changes:
*Added archive https://web.archive.org/web/20141118061526/http://www.riskmanagementinsight.com/media/docs/FAIR_introduction.pdf to http://www.riskmanagementinsight.com/media/docs/FAIR_introduction.pdf
When you have finished reviewing my changes, you may follow the instructions on the template below to fix any issues with the URLs.
Cheers.—InternetArchiveBot (Report bug) 16:19, 24 December 2017 (UTC)
thread_title:  External links modified 

message: The sentence "Vulnerabilities are the intersection of three elements: a system susceptibility or flaw, attacker access to the flaw, and attacker capability to exploit the flaw" was simply wrong. Removed. All definitions provided in this article are correct, while the sentence is correct for a (security) breach, not for a vulnerability. There is already the same comment here in the talk page.Truman (talk) 13:54, 10 May 2018 (UTC)
thread_title:  Error in definition 

message: Please replace the content of the article with User:Buidhe paid/Vulnerability (computing). Reason: Improve content + sourcing, add new sections on such topics as vulnerability management, lifecycle, assessment, and legal issues. Thanks! Buidhe paid (talk) 23:56, 3 May 2024 (UTC)
replies: text: v/r - Seawolf35 T--C 13:23, 9 May 2024 (UTC)
thread_title: Edit request

message: Summary of changes as a result of the Wiki99 project (before, after, diff):
*Complete rewrite according to recent, reliable sources
*Fix unsourced content issues
*Add sections about vulnerability management, lifecycle, assessment, and legal issues
*Include content about how open source software relates to vulnerabilities
Future steps for other editors to consider:
*Improve the coverage to be even more comprehensive
*Update the article in response to future developments
Buidhe paid (talk) 19:33, 10 May 2024 (UTC)
thread_title:  Wiki99 summary