2 ms·
Agreed, the key was already publicly available, and it was just a matter of time for someone with malicious intent to find it if that's not already the case. E
by m-p-3 7y ago
Agreed, the key was already publicly available, and it was just a matter of time for someone with malicious intent to find it if that's not already the case.
Exposing something already public to speed up the resolution and make sure the impact is kept to a minimum considering the circumstances.
- air7 7y agoWell, one can argue that every vulnerability is "already publicly available, and just a matter of time for someone with malicious intent to find it"
- dependenttypes 7y agoThis is correct, which is one of the reasons that I personally support full disclosure for everything.
- gdm85 7y agoI didn't know that Netgear already has proven to not be following coordinated disclosure; generally I think it's fair to give some time to the vendor. I like how Google Project Zero does it: give time, but don't extend indefinitely.