3 ms·
On the other hand, by publishing the vulnerability, you’re making people running all those other systems more vulnerable. The point of the embargo process is co
by vertex-four 8y ago
On the other hand, by publishing the vulnerability, you’re making people running all those other systems more vulnerable. The point of the embargo process is collective security, rather than just the security of your own users. One day, your project of choice won’t be able to fix a vulnerability as quickly as another - and you’ll be left in the lurch then, without an embargo.