4 ms·
They could tell vendors about the issue earlier without telling the rest of the world earlier though, can't they?
by mehrdadn 7y ago
They could tell vendors about the issue earlier without telling the rest of the world earlier though, can't they?
- ebiggers 7y agoWell, the longer that vulnerabilities are kept secret, the longer that users are unable to take any action to protect themselves, and the less incentive that vendors have to roll out fixes quickly and to prevent vulnerabilities in the first place. See the Project Zero disclosure FAQ: https://googleprojectzero.blogspot.com/p/vulnerability-disclosure-faq.html https://googleprojectzero.blogspot.com/p/vulnerability-discl...