3 ms·

Advisory makes it sound like this is an active security flaw. However, it was fixed almost two months ago.

• void-star 4y ago
  This is pretty standard, timeline-wise, for most responsible disclosure policies. As-in : Give the vendor ample time to publish and deploy a fix before reporting vulnerability specifics. Aside: As usual, excellent work from Google project-zero
  • bmitc 4y ago
    I get that, but I wasn't commenting on that. I was commenting on the Hacker News title being misleading.
  • saagarjha 4y ago
    Google has more than one security team ;)