Josh and Kurt talk about CVE, DWF, and the future of flaw reporting.