Protip: academic board observed secret and so did vendors. The OpenBSD patch went unnoticed. It was the Infosec community that screwed up.https://twitter.com/marcan42/status/919972354947796993 …
Disclosing to those unrelated to fixing the bug 2+ months before for acad brownie points is irresponsible. Infosec community did what?
-
-
indeed. Who is "infosec community" :) ?
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Why? That’s a very typical process for academic submissions.
-
Typical does not make it right, and most (good) academic security papers aren't about software bugs but about deeper protocol/crypto breaks.
- Show replies
New conversation -
-
-
Also, the term “responsible” has been long deprecated in favor of “coordinated”. And if you care to read the ISO standard...
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.