Why? That’s a very typical process for academic submissions.
-
So you must be angry at the silent “early” update not at the disclosure to an “academic review board”.
I'm annoyed that disclosure to an academic review board (with zero benefit to security and low but nonzero risk of leak)...
-
-
Happened two months before disclosure to the first vendors (which is what actually helps security).
-
No. What helps security is the incentive to disclose. Bug bounties are that of sec res. Top confs are that of academics. With your rationale there would have been no disclosure (finding) at all. If you believe in discl for greater good go tell hackerone and co they’re pointless
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.