4 ms·
> Customers of our paid services will receive additional pre-publication vulnerability disclosures, formerly the NSP’s premium tier. How common is early access
by inlined 9y ago
> Customers of our paid services will receive additional pre-publication vulnerability disclosures, formerly the NSP’s premium tier.
How common is early access to vulnerabilities as a paid service? This seems to have some ethical concerns since it dramatically increases the odds of weaponization prior to public disclosure.
- Already__Taken 9y agodon't paid npm customers get to run their own instances of npm? They need some kind of lead time purely from a technical point of view to patch.
- elmigranto 9y agoI think the point was that malicious actor gets early access to "exploits" by becoming paid customer and has a lot of time to pwn general public.