Developers › Security Group blog
How we rate security issues
To coincide with the release of Opera 10.61, we are changing the wording we use to rate security issues when publishing advisories.
The number of ratings remains the same, but there has been some confusion in the past about how the severity ratings relate to each other, and what sort of issues will fall into each category. To make the ratings clearer, we have changed to using terms that are in more common use by other software vendors. At the same time, we took the opportunity to reassess the severities of various types of issue, to make sure that they are accurately reflected by the ratings.
An article has been published detailing the new ratings, and for the first time, a list of what types of issue fall into each rating. Not all issue types will be mentioned specifically, but the main cases for each category are shown. The Web is an ever-changing platform, and the potential impacts of any issues will change over time as different technologies are used. The list is therefore not final, and may change to adapt to the new types of threat or protection that appear.
More information:
* How Opera Software rates security issues
* Opera's security policy
* What is a browser security issue, anyway?
The number of ratings remains the same, but there has been some confusion in the past about how the severity ratings relate to each other, and what sort of issues will fall into each category. To make the ratings clearer, we have changed to using terms that are in more common use by other software vendors. At the same time, we took the opportunity to reassess the severities of various types of issue, to make sure that they are accurately reflected by the ratings.
An article has been published detailing the new ratings, and for the first time, a list of what types of issue fall into each rating. Not all issue types will be mentioned specifically, but the main cases for each category are shown. The Web is an ever-changing platform, and the potential impacts of any issues will change over time as different technologies are used. The list is therefore not final, and may change to adapt to the new types of threat or protection that appear.
More information:
* How Opera Software rates security issues
* Opera's security policy
* What is a browser security issue, anyway?
Readers' comments 8
Left under the original article, as archived.
About this article
| Published in | Security Group blog |
|---|---|
| Date | August 12, 2010 |
| Author | Yngve Nysæter Pettersen |
| Tags | Opera, vulnerability reporting, issue rating, browser, vulnerability fix, Security Issue, 512-bit, cabforum, Certificates, MD5, renego, renegotiation |
| Original | Internet Archive |
Charles SchlossThursday, August 12, 2010 3:20:50 PM
Daniel HendrycksThursday, August 12, 2010 7:15:07 PM
Mağruf ÇolakoğluThursday, August 12, 2010 9:04:53 PM
NRFriday, August 13, 2010 1:33:40 AM
HokkutFriday, August 13, 2010 5:39:06 AM
Artur „Jurgi” JurgawkaFriday, August 13, 2010 9:16:24 AM
And this is good topic to recommend Stay Secure widget.
http://widgets.opera.com/widget/4495/
Cutting SpoonFriday, August 13, 2010 8:57:08 PM
Crysta T. LaceySaturday, August 14, 2010 2:01:23 AM