3 ms·

Too many companies dont want to patch and won't do so unless forced.

• mehrdadn 7y ago
  Yes, that's why you disclose if they don't do that. Not if they do.
  • drenvuk 7y ago
    Then it turns into blackmail. Indifference to their actions is necessary.
  • robocat 7y ago
    A patch for a security flaw exposes the flaw to anyone with deep enough pockets to reverse engineer the patch. Disclosing the flaw even if patched helps everyone, including you and me.