4 ms·
Responsible Disclosure is not necessarily the One True Way(tm). It's certainly debatable. If I were a security researcher, I'd only consider an exceedingly fe
by phil21 9y ago
Responsible Disclosure is not necessarily the One True Way(tm). It's certainly debatable.
If I were a security researcher, I'd only consider an exceedingly few exceptional cases as something I need to give someone prewarning about. Once the knowledge is known, I'm generally of the opinion that in the vast majority of cases it should be immediately published to the world - not a select few elites.
Plus from a past life I know those embargo'ed bugs rarely actually are. They get leaked all the time by the community if the price is right.