3 ms·
> First of all, Google has no responsibility to give any period of time. Any security researcher has a responsibility to disclose a vulnerability in such a way
by dingo_bat 9y ago
> First of all, Google has no responsibility to give any period of time.
Any security researcher has a responsibility to disclose a vulnerability in such a way that it does not cause widespread damage. I don't know why you would think otherwise.
- Buge 9y agoNot everyone agrees with you. Some people promote full disclosure. >Full disclosure is the policy of publishing information on vulnerabilities without restriction as early as possible, making the information accessible to the general public without restriction. In general, proponents of full disclosure believe that the benefits of freely available vulnerability research outweigh the risks, whereas opponents prefer to limit the distribution. https://en.wikipedia.org/wiki/Full_disclosure_(computer_security) https://en.wikipedia.org/wiki/Full_disclosure_(computer_secu... https://hn.algolia.com/?query=author:tptacek%20responsible%20disclosure&sort=byDate&prefix&page=0&dateRange=all&type=comment https://hn.algolia.com/?query=author:tptacek%20responsible%2... https://news.ycombinator.com/item?id=16579292 https://news.ycombinator.com/item?id=16579292
- lawnchair_larry 9y agoLetting vendors leave bugs unfixed is irresponsible. Google didn’t put the bug there. I don’t know why you would think otherwise.