Flock can now issue CVEs for its own products. Should we trust it?

Flock has joined the CVE Program as a CVE Numbering Authority, giving the company authority to assign CVE IDs to vulnerabilities in its own surveillance cameras and license plate readers. The move raises questions about a surveillance vendor managing disclosure of flaws in its own products.

Source: cyberscoop.com

Curated Permalink