7 ms·
Dropping a public exploit on github before distros have patches available isn't very cool, or is that just how veterans roll these days?
by 0x0 5mo ago
Dropping a public exploit on github before distros have patches available isn't very cool, or is that just how veterans roll these days?
- tptacek 5mo agoThere is no one accepted set of norms on disclosure. Any strategy you take, someone will criticize.
- akerl_ 5mo agoI don’t know if “cool” is the word I’d use, but there isn’t an established “right” way to disclose a vulnerability that you found outside of a contracted security review or other employment/contracting arrangement.
- john_strinlai 5mo agomainline was patched a month ago