> unless of course that anticipated disclosure date was decided together with the vendor Does anybody know if it was? How does Project Zero make these decisio

> unless of course that anticipated disclosure date was decided together with the vendor Does anybody know if it was? How does Project Zero make these decisions? Do they consider the install base already patched?