3 ms·
This is not responsible disclosure [1], which raises an ethical issue. For victims added to the list and published within days, the victim is not allowed adequ
by zxv 10y ago
This is not responsible disclosure [1], which raises an ethical issue.
For victims added to the list and published within days, the victim is not allowed adequate time time to fix their vulnerability. That does real harm to the victims by inviting attacks before they can avoid the harm the disclosure invites.
[1] https://en.wikipedia.org/wiki/Responsible_disclosure https://en.wikipedia.org/wiki/Responsible_disclosure
- allendoerfer 10y agoWrong. The report is not about an open exploit but about an actively used exploit spreading malware.
- zxv 10y agoThe sites are victims of xploit as well. That is the issue I am raising.