Slashdot Mirror


User: istr

istr's activity in the archive.

Stories
0
Comments
5
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 5

  1. Re:A GPL VulnXML engine on OWASP's VulnXML Database · · Score: 1

    Anonymous Coward...
    It would be better to post your inadequate insults off-list and face-to-face or not at all.

  2. Re:Double-edged Sword? on OWASP's VulnXML Database · · Score: 2, Informative

    Sorry for that...
    :o|
    The db is beta. That means, all entries found there are only for demonstration purposes. Most are imported from some very outdated Whisker set.
    Currently the objective of that db is to evaluate the viability of the entry editor and the data format, not to provide some up-to-date real checks.
    I updated the welcome text appropriately.
    Thanks for the hint.

  3. Re:Automated testing tool, a suggestion on OWASP's VulnXML Database · · Score: 1

    Sounds like a good suggestion at the first glance... :o)

  4. Re:XML oversold IMO on OWASP's VulnXML Database · · Score: 2, Interesting
    I agree to a certain extent.
    In fact XML is just a serialization format. Alas a format with lots of unnecessary overhead. :o(
    The decision for using XML maybe was based upon it's "popularity" - I don't remember...
    Fortunately the serialization format can be switched within seconds to something less overheaded (since we use the OCL with a generic serialization mechanism). So it is very easy to provide the good ol' properties format instantaneously.
    IMO For VulnXML's duty some relational format is clearly overdone. A "path-based" / "navigational" format has great advantages regarding to performance and flexibility (not only in this case).

    So - think of XML only to be a serialization form; the description itself is "path-based" deliberately, since it is
    • faster
    • more extensible
    • easier to extend and to store
  5. Re:Wow on OWASP's VulnXML Database · · Score: 1

    Well, not quite... Development takes place publicly at Sourceforge. Check out our CVS repository. :o)