False Negative
One of the core metrics in scam detection, referring to the case in which an actual scam message is not identified. An excessively high rate renders protection ineffective.
Timeline (last 90 days)
Matt Pocock's core judgment is: making the review "super ambitious" and proposing more structural fixes inevitably increases false positives, but false positives are easy to handle—what is truly dangerous is false negatives.
A false positive means the system issues an alert but the equipment is actually normal; a false negative means the equipment does fail but the system does not alert.
For equipment where downtime costs are extremely high, more false positives should be tolerated in exchange for few false negatives; for general equipment, a slightly higher false negative rate can be accepted to control inspection workload.
A false positive means the scanner or tool reports a vulnerability that does not actually exist, while a false negative means a real vulnerability is not detected.
In Agent security, a false negative means a real attack is let through, which can lead to irreversible consequences such as key exfiltration; a false positive merely blocks a legitimate request, which can be mitigated by retrying or manual review. The costs of the two are asymmetric.
All Facts (5)
Matt Pocock's core judgment is: making the review "super ambitious" and proposing more structural fixes inevitably increases false positives, but false positives are easy to handle—what is truly dangerous is false negatives.
50%UnverifiedA false positive means the system issues an alert but the equipment is actually normal; a false negative means the equipment does fail but the system does not alert.
50%UnverifiedFor equipment where downtime costs are extremely high, more false positives should be tolerated in exchange for few false negatives; for general equipment, a slightly higher false negative rate can be accepted to control inspection workload.
50%UnverifiedA false positive means the scanner or tool reports a vulnerability that does not actually exist, while a false negative means a real vulnerability is not detected.
50%UnverifiedIn Agent security, a false negative means a real attack is let through, which can lead to irreversible consequences such as key exfiltration; a false positive merely blocks a legitimate request, which can be mitigated by retrying or manual review. The costs of the two are asymmetric.
50%