Topic

Bugonomics

Term for the economics of vulnerability discovery and repair, comparing the cost of finding bugs with the cost of validating, prioritising and shipping fixes.

Current clusters

build1 publisher

Opening the cohttp fix PR drew traversal probes within ten minutes

Anil Madhavapeddy patched a path traversal bug in OCaml's cohttp and found probes for it in his logs ten minutes after opening the fix PR. His own agent had already built the exploit from a bug-class hint.

Publishers:anil.recoil.org

Reality

Evidence52
Adoption44
Hype gap+14
Incentives55
Confidence57