[gregw2]

I read recently Chinese law required them to disclose the bug to the government within two days of disclosing it to vendor and that's why Alibaba was punished.

Now I read they have to give it to the government first.

Big difference. Which is the truth and how do we know?

[yorwba]

All of this was already discussed yesterday: https://news.ycombinator.com/item?id=29658977

[gregw2]

Thanks