> “I’ll show you mine if you show me yours.” That is not generally how vulnerability disclosure works My understanding was that people will responsibly disclos

> “I’ll show you mine if you show me yours.” That is not generally how vulnerability disclosure works My understanding was that people will responsibly disclose information to protect the public. Signal disclosing these vulnerabilities would have mostly protected Cellebrite, who have made it abundantly clear that the good of the general population is none of their concern and who's business model is based on keeping everyone insecure for their own profit. Now that is how responsible disclosure doesn't work.