*Huge finding* on Chinese vendors: they handle private sec reports, even many give bounties, but none of them release public bulletins!
-
result: u won't find any CVE assigned to CN software, they'r vuln free! Hard to track/study what faults they usually make, what a bad idea!
@HaifeiLi interesting tactic from their side, but it probably does less good than they may think.
-
-
@bartblaze yeah, when I say "bad idea" was thinking from vendor's side. -
@HaifeiLi Do you think they'll be more public about it in time?
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.