newphonnewaccnt

5 ms·

1. 1.▲
   by newphonnewaccnt 5y ago

   As stated previously, it wouldn't work unless the company was prepared to disclose all reports at two stages: 1) hash of unpredictable description of the issue when the issue is reported, 2) hash input when the issue becomes public. Th
2. 2.▲
   by newphonnewaccnt 5y ago

   It comes down to how much companies are willing to reveal after the fact then. If companies aren't prepared to reveal enough unpredictable detail involved in an exploit after the exploit had been fixed, that's another issue. I t
3. 3.▲
   by newphonnewaccnt 5y ago

   The hash input could just be a generic description of the bug, minus any sensitive info, plus some salt. All report hashes would have to go public as soon as the report is accepted. The hash input could go public once the bug goes public, s
4. 4.▲
   by newphonnewaccnt 5y ago

   Couldn't companies just publish a list of hashes of existing but not yet public disclosures? Seems as if that could solve the issue of doubt wrt timing.
5. 5.▲
   by newphonnewaccnt 6y ago

   This is why apps like netguard are a must. Is there an equivalent for iOS?