2 ms·

Why not publish the existence of the vulnerability without any details? That is the only information most people will get from the disclosure anyway. Only the

Why not publish the existence of the vulnerability without any details? That is the only information most people will get from the disclosure anyway. Only the black hats are helped by disclosing the details.

pixl97 7y ago
Why not fix your bugs in 180 days?
dvdkon 7y ago
Blackhats knowing is what makes companies patch the vulnerabilities. Not enough people care about there being an undisclosed vulnerability for the company to expend resources.
- leereeves 7y ago
  Microsoft doesn't care about fixing vulnerabilities unless Google forces them to?
  - wysifnwyg 7y ago
    Not many companies care about fixing vulnerabilities until they actually have to.