2 ms·
If you’ve already disclosed it to the vendor, a leak of the information shortly thereafter would likely not be so anonymous.
by macintux 6y ago
If you’ve already disclosed it to the vendor, a leak of the information shortly thereafter would likely not be so anonymous.
- gruez 6y agoIf you're disclosing it to the vendor, then you're probably cooperating with them and are going to give them 90 days to fix it. If they don't fix it within that time, anonymously publish it a month or two after. That gives a total time of around 4-6 months between you discovering it and the "anonymous researcher" on exploithub "independently" discovering it.