3 ms·
What about security bugs? Don't you need at least a secure way to discuss them?
by stkdump 7y ago
What about security bugs? Don't you need at least a secure way to discuss them?
- paxys 7y agoExpecially security bugs. Communication can be hidden during the remediation period, but there's no reason for them to not be made public immediately after.
- t-writescode 7y agoSo then there is a reason to have communication be private, as you said.
- dependenttypes 7y agoI would argue that even then it should be public. Forks exist and everyone can have one (even if it is for private use). For all we know the maintainer of the "original" could be a hostile actor.