4 ms·

There's a whole concept of responsible disclosure[1] in white-hat security research that involves notifying the company and then notifying the public after givi

• akerl_ 5y ago
  Even that page points out that “coordinated disclosure” is a more accurate term for what you’re describing. There are a wide variety of opinions in the industry about the merits of coordinated vs full disclosure. Calling one option “responsible disclosure”, or suggesting that it’s generally understood to be the most ethical, is outlandish.