2 ms·

How did they do it before?

• kortilla 3y ago
  For the good of the broader Internet/society. Like an academic research institution. Value to Google came in the form of attracting top talent because it indicated it was more than a version of oracle/ibm focused on nothing but money making. It also came in the form of feedback on how to improve software security in general. Google was also able to tap the team resources to look into the security of a new proposal. 8 years ago if the notion of “we’ll sit on vulnerabilities, patch them in our products, and use that as advertising for the products” came up, it would be laughed out of the room. People joined project zero to do cutting edge research and improve the world, not to line Google’s pockets through early disclosure access.