no, theyre allowed to report vulnerabilities to vendors, just not to third parties.
Chinese VEP is weird: "Knowledge of undisclosed software vulnerabilities should remain in China.”https://www.cyberscoop.com/pwn2own-chinese-researchers-360-technologies-trend-micro/ …
-
-
-
Do HackerOne/Bugcrowd count as vendors or third parties?
- 3 more replies
New conversation -
-
-
Seems pretty typical for them to me, surprised it took this long.... given all the bugs Vulcan, Keen, etc have been dominating and dropping lots of bugs the last 3-4 years.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.