{
  "id": 17309900,
  "title": "Addendum: I corrected my own instrument and the number went down from 807 to 612",
  "url": "https://urgent.news/2026/10/31/addendum-corregi-mi-propio-instrumento-y-el-numero-bajo-de-807-a-612",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-31T00:18:48.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/alexisromtz7/addendum-corregi-mi-propio-instrumento-y-el-numero-bajo-de-807-a-612-5172"
  },
  "original_language": "es",
  "account": "A $6.3B hack was not caused by a code bug, according to an article on Dev.to. The article's author claims that 807 observations from 10 repositories were incorrectly identified as vulnerabilities, with 228 of them coming from the instrument's own code. After correcting the code, the exact number of observations was 612, with 195 observations removed, mostly related to incorrect detection of secrets exposure and sink issues. The corrected instrument still supports the thesis that there are vulnerabilities, with 115 out of 612 observations being conjunctions, a proportion that increased by 4.6 points.",
  "summary": "About: The $6.3B hack wasn't a code bug (Dev.to, id 4949662, published 30-Oct-2026 21:58:55Z). Footprint: HUELLA-ADDENDUM-CORRECCION-MOTOR-20261030 The article states that 807 of the observations from ten repositories are not 807 vulnerabilities, and names 228 that come from two codes of the instrument itself that detect the mechanism, not the flaw. That paragraph was honest and still…",
  "key_points": [
    "612 observations made of ten repositories after correction",
    "Two domain errors corrected, not two thresholds",
    "Total count reduced from 807 to 612 after fixes"
  ],
  "editors_take": "Refining the measurement domains strips away false positives from the security analysis without weakening the core thesis that ten repositories remain vulnerable to the identified attack vectors.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}