Kate ScarcellaGuestAnd, Kate, I'm going to toss this to you because I can't make up my mind if this is the responsible thing to do or is this the equivalent of, you know, Trump saying we should just stop counting COVID cases and then that way the numbers will go down.

So every report requires time to assess, and the low-quality submissions can vary findings that need attention.

And so by putting a daily cap slows the intake, But the negative of that, it does improve our ability to validate or fix vulnerabilities.

I know that sounds like a silly thing to say, but I was more of a network person than an application.

And I have this whole chicken and egg thing, like who came first, network or application.

and I haven't decided, but now with this GitHub thing, I think it's going to be a mistake at the end of the day to the latter point that you made about Trump, because at the end of the day, what does a cap actually do? I mean, we have had problems forever trying to quantify and qualify whether vulnerabilities, you know, high, medium, and low.

Since cybersecurity has started, this has actually been an issue on the criticalness of the vulnerability.

And now I feel like GitHub has sort of just put this umbrella over, we're stopping here.

And who cares? We can have 100,000 low vulnerabilities, but one high critical vulnerability that's extremely serious, and that's going to be buried now.
And, Kate, I'm going to toss this to you because I can't make up my mind if this is the responsible thing to do or is this the equivalent of, you know, Trump saying we should just stop counting COVID cases and then that way the numbers will go down.

So every report requires time to assess, and the low-quality submissions can vary findings that need attention.

And so by putting a daily cap slows the intake, But the negative of that, it does improve our ability to validate or fix vulnerabilities.

I know that sounds like a silly thing to say, but I was more of a network person than an application.

And I have this whole chicken and egg thing, like who came first, network or application.

and I haven't decided, but now with this GitHub thing, I think it's going to be a mistake at the end of the day to the latter point that you made about Trump, because at the end of the day, what does a cap actually do? I mean, we have had problems forever trying to quantify and qualify whether vulnerabilities, you know, high, medium, and low.

Since cybersecurity has started, this has actually been an issue on the criticalness of the vulnerability.

And now I feel like GitHub has sort of just put this umbrella over, we're stopping here.

And who cares? We can have 100,000 low vulnerabilities, but one high critical vulnerability that's extremely serious, and that's going to be buried now.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.