2 ms·
Delaying PoC raises the cost of exploiting the vulnerability; having it makes it easier to exploit and not having it means an attacker needs to invest resources
by thesteamboat 11y ago
Delaying PoC raises the cost of exploiting the vulnerability; having it makes it easier to exploit and not having it means an attacker needs to invest resources recreating it. How much this helps depends on a lot of factors, but it doesn't seem unreasonable to me to allow some time for users to patch before releasing the PoC.