4 ms·
That's what an embargo is and why it exists. And when it's up, it's up. This is essentially a rehashing of the Microsoft/Google squabble a few months ago.
by fieryscribe 11y ago
That's what an embargo is and why it exists. And when it's up, it's up.
This is essentially a rehashing of the Microsoft/Google squabble a few months ago.
- CydeWeys 11y agoMaybe there should be tiered embargoes then, so that the fix is released before the exploit?
- danielweber 11y agoNo, Google gave Microsoft X days to fix and release, and MS missed the deadline. (Assuming I'm thinking of the same issue as you.) Google didn't release PoC exploit code the same instant as Microsoft released the fix.
- davmre 11y agoThe point of an embargo is to allow vendors to coordinate patches. Since the exploit clock starts ticking when the first patch is released, releasing all patches at once means that everyone has some opportunity to patch before an exploit is in the wild. Releasing an exploit simultaneously with the patches gives people zero time to patch. In that sense it somewhat defeats the purpose of the embargo.