30 ms·
I can somewhat get on board until the moment a 0day is observed in the wild, then it should be disclosed. i can not protect my systems from things I am not awa
by syshum 8y ago
I can somewhat get on board until the moment a 0day is observed in the wild, then it should be disclosed.
i can not protect my systems from things I am not aware of, allowing a vulnerability to be exploited for 60 days when on day 29 of "responsible disclosure" window the vulnerability was observed being actively exploited is not responsible either.
- kstrauser 8y agoI'm with you. On that day, I assume everyone in the world except me knows how to exploit my system, and the vendor is racing the clock.