2 ms·
No, I will. The distros and the kernel devs should be talking and moving on high sev patches, sure. But real people will have gotten hurt because the reporter d
by dweinus 5mo ago
No, I will. The distros and the kernel devs should be talking and moving on high sev patches, sure. But real people will have gotten hurt because the reporter didn't want to wait for that to happen. That's on them.
- john_strinlai 5mo agoyou must be unfamiliar what used to happen before hard deadlines were set on disclosure. it was much worse for the users. here is a good start: https://projectzero.google/vulnerability-disclosure-faq.html#whydeadlines https://projectzero.google/vulnerability-disclosure-faq.html... there is ~3 decades of more context if you search for it.
- stingraycharles 5mo agotldr: if security issues don’t get disclosed (or the real threat of disclosure) they won’t get fixed / prioritized.