5 ms·

I feel like this goes against responsible disclosure. Google should give the manufacturers a month to push updates themselves, just like Google would expect a m

I feel like this goes against responsible disclosure. Google should give the manufacturers a month to push updates themselves, just like Google would expect a month to fix an issue someone reported to them.

jdm2212 7y ago
It's being actively exploited, which changes the calculus.
- mehrdadn 7y ago
  "Actively exploited" by... law enforcement? Do all consumers really need to freak out about this the same way they would if hackers had access? Doesn't that detail change the calculus here?
  - infinityplus1 7y ago
    Not all law enforcements are working for the good of their people, probably.
    - mehrdadn 7y ago
      That still doesn't counter my point.
  - msbarnett 7y ago
    > "Actively exploited" by... law enforcement "Actively exploited" by at least law enforcement. It’s sheer folly to presume that if one motivated group has already discovered this that nonetheless somehow others won’t have as well.
beojan 7y ago
The manufacturers don't need to fix anything though, they just need to push out the update. The entity that needs to fix (and has fixed) the bug is Google itself.