He wrote the paper then randomly waited two months. He already did the work. He could've sent the draft to CERT. He chose not to.
I appreciate debate about disclosure timelines and even FD is fine, but just why on Earth would you say nothing for months.
-
-
Heck, the paper would be *improved* by including relevant discussion about vendor responses and fix approaches and indeed many do so.
-
Imo don't complain someone is taking fame and reputation as reward for their work unless you're offering some other form of currency
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.