3 ms·
Just out of curiosity, is 60 days a sort of undefined (or defined, I don't know) "standard" for disclosure? Not the first time I've seen that duration in refere
by remarkEon 4y ago
Just out of curiosity, is 60 days a sort of undefined (or defined, I don't know) "standard" for disclosure? Not the first time I've seen that duration in reference to a bug like this.
- SahAssar 4y ago60 or 90 days is pretty standard for non-bounty disclosure, and has been used by high profile projects like project zero.