For example, Project Zero has talked at length with Chrome, Android, and Apple about source code/binary patch gaps in the past.
Prikaži ovu nit
Awesome work, and I really like that they provide general insights to go along with the attack research results.https://twitter.com/dwizzzleMSFT/status/920637599449939968 …
-
-
-
We told them that attackers are incentivized to watch for patches in a way that defenders aren't, and they accepted the risk.
Prikaži ovu nit -
The vendors have reasonable positions for why they do this, but having other researchers raise this helps to balance perspectives.
Prikaži ovu nit -
MS OSR will get the same "marketing attack" critiques that we get, but it just isn't true. They're just trying to improve security.
Prikaži ovu nit -
So I couldn't be more excited about this type of research publication, and I hope we get to see more of them. Good job Jordan!
Prikaži ovu nit
Kraj razgovora
Novi razgovor -
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.