# The DREAD Pirates

DevFeed: [The DREAD Pirates](<https://devfeed.tech/articles/the-dread-pirates-37086.md>)

Original publisher: [Read original article](<https://shostack.org/blog/tmt-the-dread-pirates/>)

Author: Adam

Published: 2018-05-31T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [bug](<https://devfeed.tech/topics/bug.md>), [Security](<https://devfeed.tech/topics/security.md>), [Software](<https://devfeed.tech/topics/software.md>), [Microsoft](<https://devfeed.tech/topics/microsoft.md>)

Tags: [bug](<https://devfeed.tech/tags/bug.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [security](<https://devfeed.tech/tags/security.md>), [software](<https://devfeed.tech/tags/software.md>)

## AI overview

The article critiques DREAD, a bug-ranking approach created during Microsoft's early security efforts. It argues that DREAD produces inconsistent ratings, relies on arbitrary fix thresholds, can misrepresent externally discovered vulnerabilities, and may conflict with bug-bar decisions.

## Source excerpt

[no description provided]