Collective noun search for security vulns moves into beta testing

Cyber, nest or hatstand? VOTE now for your favourite

60 Reg comments Got Tips?

The recent rash of Android vulnerabilities has made it clear that a new collective noun for such flaws, and possibly a separate one for security bugs in general, is required.

In its early days the infosec industry borrowed heavily from the lexicon of biology to talk about problems affecting systems: viruses, worms, bugs etc.

This would suggest something like plague, scourge or intrusion (as in an intrusion of cockroaches) as potential candidates.

But since then, computer security types have ditched lab coats for combat fatigues and adopted terms that began in the military – such as APT (advanced persistent threat) – so perhaps we ought to widen the field.

A "cyber" of flaws is one of several new terms currently being rigorously tested at Vulture Central, based on early suggestions on Twitter. "Windows" (hat tip J‪ack Daniel‬), "overflow" and "panic" have all been suggested as potential candidates.

"Nest", "basket" and the slightly more surreal "hatstand" have also been mentioned. If we have a pack of lies and a wad of notes then why can't there be a collective noun for vulnerabilities?

The higher profile vulnerabilities – certainly since Heartbleed, Shellshock and running up to Stagefright – have catchy names and come with their own logos. The Ghost vuln even had it's own unofficial song, the Ghostbusters theme.

Security bugs even have their own awards, thanks to categories in the Pwnie Awards that take place during the Black Hat conference in Vegas every year.

Any way you care to look at it, we're well past knowing them by CVE number, but we still don't have a collective noun. Enough!

It's come to the point where we need to turn it over to Reg readers to decide from among the candidates, hence this poll. ®

JavaScript Disabled

Please Enable JavaScript to use this feature.


Keep Reading

New Google rules mandate Android 'Poundland' Edition, Go, for sub-2GB RAM phones once Android 11 is out

Chocolate Factory actively pushing lightweight OS on less powerful devices

Android 11 lands with plenty more privacy preferences for Pixels and special Google friends first

Enterprise edition offers admins more ways to blend work and play

Google bans stalkerware apps from Android store. Which is cool but... why were they allowed in the first place?

Disclosed tracking, helicopter parenting programs are still kosher

Android 11 will let users stop device-makers from killing background apps, says Google

Users will be able to 'override ... restrictions' on phones and other kit, says engineering team

Google promises another low-end Android effort as it buys into Indian mega-carrier Jio Platforms

$4.5bn splash turns out to be first installment in $10bn ‘Digitisation fund’ and development template for new products

Commit to Android codebase suggests Google may strong-arm phone makers into using 'seamless' partitioned updates

Such a move could standardise deployment of new versions, rather than it being at the whim of OEMs

Android user chucks potential $10bn+ sueball at Google over 'spying', 'harvesting data'... this time to build supposed rival to TikTok called 'Shorts'

These are the class-action-suit-joining 'droids lawyers are looking for. (We'll get our coats)

Google Chrome 85 to block ads that hog power, CPUs, network: Web ads giant will black-hole 0.3% of web ads

So brave... but not so Brave

Biting the hand that feeds IT © 1998–2020