4 ms·
When I report a vulnerability, I ask (if it's not already known) what their timetable is for patching it. If they want more than 30 days for a simple fix, I dis
by sarciszewski 11y ago
When I report a vulnerability, I ask (if it's not already known) what their timetable is for patching it. If they want more than 30 days for a simple fix, I disclose immediately.
The turnaround time for most projects I've reported to was less than a week.