Static analysis is examining the code without executing it; providing understanding of code structure and ensuring the code adheres to industry standards (~4 mins)

CVE, short for Common Vulnerabilities and Exposures, is a list of publicly disclosed computer security flaws. The CVE system works by assigning unique, standardized identification numbers to publicly disclosed software vulnerabilities so organizations can track and share security information across different tools and databases.CVE entries are brief. They don’t include technical data or information about risks, impacts, and fixes. Those details appear in other databases, including the U.S. National Vulnerability Database (NVD), the CERT/CC Vulnerability Notes Database, and various lists maintained by vendors and other organizations. What qualifies as a CVE?According to the CVE Numbering Authority operational rules, CVE IDs are assigned to flaws that meet specific criteria. Flaws must: Be independently fixable. The flaw can be fixed independently of any other bugs. Be acknowledged by the affected vendor or documented. The software or hardware vendor acknowledges the bug's existence and confirms that it negatively impacts security. Alternatively, the reporter must have shared a vulnerability report that demonstrates both the negative impact of the bug and that it violates the security policy of the affected system. Affect only 1 codebase. If a flaw impacts more than 1 product, it gets a separate CVE for each product. In cases of shared libraries, protocols or standards, the flaw gets a single CVE only if there’s no way to use the shared code without being vulnerable. Otherwise each affected codebase or product gets a unique CVE.

Pope Francis’ reign included an astronomical increase in CVEs recorded…From https://x.com/IceSolst/status/1915516957840867394 It wouldn’t be appropriate to include Pope Leo XIV, because that would...

1,000 songs in your pocket changed how the world listened to music. The MoTaverse changes how tech professionals grow their careers.Sixteen features, sixteen stories, one thread running through al...

Anyone else seen a preview upside down on Slack?  This was a DM. 

Nice to see my former SBG colleagues Steve and Alex in Leeds, with Ady as our host.

Content to go through with my team and discuss how we could bring the topics to the company

I loved seeing my Ministry of Testing profile being featured in the Testing Planet at TestBash, through a spot the difference on the centre spread! This was great for my career as it immediately b...