The 90-day policy hasn't always been easy, but based on 800+ observations we can say that it provides good results for user security.
-
-
-
The easy option (what many call 'responsible') is to let software vendors take 6-18 months to fix bugs. We don't think that's optimal.
- 4 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.