> The consensus so far is that there is no consensus, and what the "right way" is changes. Ask your coworkers if the "right way" includes leaking the vuln exis

> The consensus so far is that there is no consensus, and what the "right way" is changes. Ask your coworkers if the "right way" includes leaking the vuln existence early to hype it up for internet clout, which allows anyone smart to guess the component easily, then breaking your own embargo by publishing a PoC a week earlier than agreed and a week earlier than fixes were supposed to come out. If anyone thinks that's the "right way" then suggest they find a job somewhere else. Preferably not in tech at all.