Following a great question from CERT.PL about GCVE KEV assertion format and especially about the confidence level for an evidence of a vulnerability assertion.
We made a first table of confidence level for the evidence in the KEV record format.
#kev #gcve

Moody Urbanity - Old & New VI 🔆
情绪化城市 - 新与旧 VI 🔆
📷 Zeiss Ikon Super Ikonta 533/16
🎞️ Ilford HP5 Plus 400, expired 1993
#filmphotography #Photography #blackandwhite

Accounts auf Mastodon welche Mitglieder von Die Linke interessieren könnten! (1/X)
Erstmal: Willkommen im Fediverse :fediverse: 👋🚩
Liste an Orgas und Leuten zum folgen:
Ich nehme gerne Empfehlungen

Die Linke

Bundesverband, Stiftung und Strömungen

• https://mastodon.social/@dielinke

Die Linke (@dielinke@mastodon.social)
1.15K Posts, 141 Following, 14.7K Followers · Kämpft für soziale Sicherheit, Frieden und Klimagerechtigkeit.

🇺🇦 #NowPlaying on KEXP's #VarietyMix
Lyn Christopher:
🎵 Take Me With You
#LynChristopher
https://allover.bandcamp.com/track/lyn-christopher-take-me-with-you
https://open.spotify.com/track/4yYJ3yJFf3LyMX2EcYy9Dt

"Perseverance is failing 19 times and succeeding the 20th."
—Julie Andrews
#acting #coaching #inspiration

🎋 So, why *should* GNOME support server side decorations?
#software #linux

So, why *should* GNOME support server side decorations?
Cet article est aussi disponible en français. This article contains quite a few technical terms, which I will explain these in the following paragraphs, those that are already familiar with these terms may skip to the next section. A basic understanding of linux and it’s desktop environments is assumed. Server side decorations (SSD) is the term for when when the application’s titlebar is drawn by the system and client side decorations (CSD) is the term for when the applications draws it’…

“This is not 'spicy'. This is illegal. This is appalling. This is disgusting.“
"The European Commission has announced it is looking into cases of sexually suggestive and explicit images of young girls generated by Grok, the AI chatbot integrated into social media platform X, following the introduction of a paid feature known as “Spicy Mode” last summer."

Für den nächsten #Diday möchte ich gern #Mastodon und auch #Pixelfed vorstellen. Dazu habe ich unter

Good Morning #Canada
Here in beautiful Belle Ewart the temp is -22°C, feeling like -31°C with the wind. But it's a dry cold....
Out west they are struggling with double digit temperatures on the plus side. Edmonton's winter festival organizers are making snow, protecting ice blocks and praying for plunging temps to save their skating rink. The unseasonable weather has impacted events throughput Alberta. The Banff and Lake Louise ice carving festival, Art of Ice, had to take down sculptures because they weren't safe. They were similarly impacted last year. The World’s Longest Hockey Game (WLHG) got underway last Thursday and players are dealing with slushy conditions while golf driving ranges are packed with eager duffers.
I'd gladly make the sacrifice and swap weather conditions with our fellow Canucks out west. It would be a burden that I'd gladly carry.
#CanadaIsAwesome #Weather
https://youtu.be/W59Pi5S-Vic

We’ve updated the draft GCVE BCP-05 standard to introduce flexible record types, making it easier to extend, enrich, and structure security advisories.
Comments are more than welcome!
#gcve #cve #vulnerability

GCVE BCP-05 drafting - Best practices for the "container" format - modified CVE Record Format
Thanks @claudex . This is an excellent point and would also improve the ability to parse GCVE records reliably. Below is a proposal for a record_type field that would serve as a key within each GCVE record. Feel free to comment. @cedric I incorporated the idea concerning the sync of the comment (not sure if the most efficient way). Proposed update to BCP-05 (following the online workshop of 6th December in Belgium) The record_type field defines the semantic category of the content submitted by…