Hacker News new | ask | show | jobs
by dwoosley 28 days ago
Calling vulnerabilities detected in code as part of a responsible disclosure program a "zero-day vulnerability" seems like marketing fluff. 0-days vulnerabilities would seem to imply this vulnerability is actively exploited in the wild, and if that's true, you weren't the first one to discover it...
1 comments

The common definition of zero day vulnerability is: A zero-day vulnerability is a software security flaw that is unknown to the vendor or developers responsible for fixing it. Because they have had "zero days" to address it, no patch or fix exists at the time the flaw becomes known to attackers.