> Security scanners and other tools could adopt various heuristics to detect this sort of situation and reduce false positives [...]
Wrong. Flat out wrong.
Security scanners should adopt LESS heuristics and focus more on VALIDATING their perceived findings. Getting a 200 response for a missing file is a web server misconfiguration, but unless the returned data actually matches, it's a false positive.
I may be repeating myself but any scanner (or researcher) who blindly raises a finding without validating it has as much to do with security as ripping wings off a fly has to do with bioengineering.
Wrong. Flat out wrong.
Security scanners should adopt LESS heuristics and focus more on VALIDATING their perceived findings. Getting a 200 response for a missing file is a web server misconfiguration, but unless the returned data actually matches, it's a false positive.
I may be repeating myself but any scanner (or researcher) who blindly raises a finding without validating it has as much to do with security as ripping wings off a fly has to do with bioengineering.