The multi-stakeholder vulnerability embargoes that I've been involved in have quite carefully excluded groups that might not cooperate.
-
Show this thread
-
Unsurprisingly I've seen this result in unnecessarily long disclosure timelines. Why risk your seat at the table with dissenting opinions?
1 reply 2 retweets 6 likesShow this thread -
So even when the intent is good (it almost always is), the organizational complexity seems to lead to below-average decision making.
1 reply 2 retweets 7 likesShow this thread
Mostly I sympathize with any security researchers that have to go through one of these - it can be a highly disorienting experience.
9:23 AM - 20 Oct 2017
0 replies
2 retweets
12 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.