4 ms·
That would be technically impossible, since you had no prior participation in this thread. I would have happily answered questions about my choice, but if your
by floatingatoll 9y ago
That would be technically impossible, since you had no prior participation in this thread. I would have happily answered questions about my choice, but if your only question is “r u trolln” then there really is very little to say.
Rabble-rouse all you like, but unless you respond with whatever your personal bare minimum delay is, you risk being perceived as the troll in this exchange.
- GordonS 9y agoGiven... > I consider 24 hours notice bare minimum responsible disclosure ...it seems rather unfair of you to have a go at my reaction. But somewhat incredibly, it appears you are serious. I don't have a bare minimum delay - I think the vulnerability discover should coordinate a 'sensible' and 'fair' disclose with the vendor. What 'sensible' and 'fair' means, really depends - how serious is the vulnerability? How many systems are affected? How quickly can the vendor patch, test and document a fix? How quickly can the fix be distributed? It's a stretch to imagine a scenario where 24 hours is in any way sensible, fair or responsible. I'd be intrigued to know your reasoning.
- jodrellblank 9y agoTheir reasoning probably rests on the word 'minimum', which you are typing but also completely ignoring.