6 ms·
> People who think that responsible disclosure must be practiced are just parroting the corporate bullshit I did not use "responsible disclosure" as commonly d
by AnaniasAnanas 8y ago
> People who think that responsible disclosure must be practiced are just parroting the corporate bullshit
I did not use "responsible disclosure" as commonly defined (apologies for any confusion), simply because I do not think that telling only the creator of the program is responsible - instead I asked you to try and consider disclosing the issue responsibly by making it public to everyone (rather than just Telegram). I consider a disclosure responsible only if both the users and any developers (including these of any forks) are aware of the issue at the same time. I do not think that the way that I personally used the term "responsible" is in any way "corporate bullshit", after all the corporations tend to ask to be the only ones (or the first ones) to learn about the issue.