I would tend to agree with the other critiques of the paper and would
include one more point. In your analysis of p_r (probability of
rediscovery), you assume its value to be very low, if not zero, for most
bugs (on a side note, vulnerabilities would be a much better term
here). This is der...
I would tend to agree with the other critiques of the paper and would
include one more point. In your analysis of p_r (probability of
rediscovery), you assume its value to be very low, if not zero, for most
bugs (on a side note, vulnerabilities would be a much better term
here). This is der...
[ more ]