5 ms·

>It seems you disapprove of the phrase "responsible disclosure" because it's ambiguous and can be used as a cudgel This is like saying that a glock can be used

• cyphar 7y ago
  > This might also be ambiguous, but we all understand the genocidal connotations. Ah yes, because using the term "responsible disclosure" is very clearly analogous to being a white supremacist. There's no need to be so ridiculously dramatic -- "responsible disclosure" was objectively the term-du-jour used by the infosec community until fairly recently. And it's perfectly understandable why the community changed their mind (vendors started co-opting the phrase as a method of shaming researchers for doing the right thing), but you are shooting yourself in the foot by being so aggressive about it. Why not just say "we used to use that term, but we use this other term now because of the following reasons"?
  • ryanlol 7y ago
    You've got the order of events wrong here. The term "responsible disclosure" originated from the legal teams of vendors around 2002, it was never co-opted by vendors. Here's a little historical context https://www.securityfocus.com/columnists/120 https://www.securityfocus.com/columnists/120 I think the 14 words comparison is apt. Without context there's nothing obviously wrong with the 14 words, just like there's nothing obviously wrong with "responsible disclosure".