>charging companies for 0days in 3rd party code, in at least many cases, would not make sense. Well you've just made the workaround trivial. Open source the ma

>charging companies for 0days in 3rd party code, in at least many cases, would not make sense. Well you've just made the workaround trivial. Open source the majority of everything under a separate org and then use that stuff from the product being shipped. Therefore any vulns are not their problem. >And if we're talking about router companies, they have the cash I don't think you understand how tiny the margins are in consumer networking gear. Lowest price dominates. >the legal components of this are not something I'd want to get into since I'm not qualified to. Suggesting they be liable is a legal component.