Unfortunately this is timely news: https://news.sky.com/story/patient-death-linked-to-cyber-att...
> Denial of service is not resulting in ...
Turns out they result in deaths. (This was DoS through ransomware)
> Denial of service is not resulting in ...
Turns out they result in deaths. (This was DoS through ransomware)
That is why I think that "severity" and the usual kinds of vulnerability scores are BS. Anyone composing a product or operating a system has to do their own assessment, taking into account all circumstances.
In the context of the original article this means that it is hopeless anyways, and the maintainer's point of view is valid: in some context everything is "EXTREMELY HIGH SEVERITY, PANIC NOW!". So he might as well not care and treat everything equally. Absolutely rational decision that I do agree with.