|
|
|
|
|
|
by akerl_
288 days ago
|
|
|
That seems to depend a lot on the vulnerability, and the company, and the users. I'm not suggesting in this thread that coordinating with vendors is bad. I'm suggesting that to frame any non-coordinated disclosure as inherently irresponsible is bad, and that is what is implied when we use the label "responsible disclosure" for "coordinated disclosure". |
|
|