3 ms·
"as irresponsibly as he did" is how all vulnerabilities were announced, at one time. I miss those days, personally. Nowadays, you're "irresponsible" if you do
by jlgaddis 9y ago
"as irresponsibly as he did" is how all vulnerabilities were announced, at one time. I miss those days, personally.
Nowadays, you're "irresponsible" if you don't follow some vendor's own made up procedures.
- Angostura 9y agoYou can follow your own procedures - decide for yourself how long you think it is reasonable for the company to mitigate in private. But give the company some time.
- MatthewWilkes 9y agoWhy? You're not an employee, you're a concerned citizen. You havr no obligations to vendors whatsoever. Now, I think it's nice to do responsible disclosure, and I certainly don't envy the people whose week has been ruined, but the discoverer of this bug did nothing wrong.
- ptlu 9y agoIt is about the increased risk fellow users will have due to this style of disclosure. Who cares about the vendor, but they are best situated to resolve the issue quickly for everyone.