So the new P0 policy is to disclose details only after 90 days even if vendor releases the patch after 20 days. That means people will wait for 70 days before patching because nobody tells them what the bug exactly is and if it is really worth patching 
The point is that "you don't need any information, we've made the decision for you, just be a passive consumer" does delay scheduled events. With more complete information, the appropriate schedule can be determined.
-
-
So we are back to my original question. Do you have a realistic example where a scheduled patching event gets delayed because of this? I just can't see this happening in practice, but I might just lack framing here?
-
You're missing the point. You don't consider it an issue unless it's delayed beyond what it would have been without context. We don't agree that is a good bar.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
