Of course the person who improperly disclosed the Apple vulnerability refers to themselves as "Agile Software Craftsman" >_____>
-
Why are those channels “proper”?
Because they don't involve everyone on the internet knowing about the vulnerability before a patch is available and a CVE is issued
-
-
I know it had at least been posted on their forum. Was not aware of the other cases. I still stand by the statement that anyone in our industry should know better, and if it was ignorance we need to do a better job of teaching this.
- 9 more replies
-
-
-
When a vulnerability is made public before a patch is available, it's usually referred to as a zero day and is *very bad*
-
I know what 0day is, and I reject the idea that full disclosure is “improper”.
- 6 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.