3 ms·

This is so irresponsible to disclose vulnerabilities this way. There is a process that many people have worked hard to create whereby vulnerabilities can be dis

by titzer 6y ago

This is so irresponsible to disclose vulnerabilities this way. There is a process that many people have worked hard to create whereby vulnerabilities can be disclosed, patched--you can even be rewarded!--and both fix and bug are eventually made public in proper time. I am just smh over this.

jacquesm 6y ago
You can't assume good faith on the part of your attacker in building your threat model. Also: it could have been much worse than this irresponsible disclosure, at least it was disclosed.
deleted 6y ago
[deleted]
adr_ 6y ago
I think Google already publicly disclosed the code to trigger this vulnerability: https://chromium.googlesource.com/v8/v8/+/fd29e246f65a7cee130e72cd10f618f3b82af232%5E%21/#F0 https://chromium.googlesource.com/v8/v8/+/fd29e246f65a7cee13...