4 ms·

No mention of Responsible Disclosure .... really hope that was done!

• deleted 12y ago
  [deleted]
  • mintplant 12y ago
    If you really did find all of these vulnerabilities, you could potentially earn a lot of money by submitting them to Google's bug bounty program.
    • deleted 12y ago
      [deleted]
• jkn 12y ago
  It's actually mentioned at the bottom of the article: Timeline: December 2, 2014 — Reported the vulnerability to the Android security, @natashenka confirmed the repro works January 6, 2015 — Response form Android security saying that the fix was pushed in mid-December, I checked that the repro stopped working on all my phones January 9, 2015 — Public disclosure