3 ms·
It's different because bad actors can take advantage of the now-public information. The point of a disclosure window is to allow a fix before _all_ bad actors
by dinosaurdynasty 2y ago
It's different because bad actors can take advantage of the now-public information.
The point of a disclosure window is to allow a fix before _all_ bad actors get access to the vulnerability.
- dcow 2y agoAnd some may already be taking advantage. This is a perfect example where users are empowered to self mitigate. You’re relatively okay on private networks but definitely not on public networks. If I know when the bad actors know then I can e.g. not run qbittorrent at a coffee shop until it’s patched.