4 ms·

That's an awfully big (and awfully optimistic) "might" in your first paragraph there...

• StavrosK 7y ago
  Not to mention that all the bad guys had to do to get the private key was unpack the firmware image, so they've probably noticed long ago.
  • gdm85 7y ago
    If what you said were true then zero-days would be always ignored and not a concern.
    • StavrosK 7y ago
      How does that follow from what I said?
• gdm85 7y ago
  It's not optimistic, it's what a responsible vendor is supposed to do. By not following responsible disclosure the researcher has lifted the vendor from the possibility of organizing a proper response.
  • gdm85 7y ago
    By the way, I meant coordinated disclosure and I am not aware of Netgear not doing any at all, never.