Have you applied to join the distros list? That would have got what you're asking for.
-
-
Replying to @taviso @benhawkes and
AFAIK, membership is frozen right now. Arch Linux is on it though... https://www.archlinux.org/packages/community/x86_64/linux-grsec/ ….
1 reply 0 retweets 0 likes -
Replying to @CopperheadOS @taviso and
So might already have the access that's required, for Linux kernels bugs. Can ask Arch's contact.
1 reply 0 retweets 0 likes -
Replying to @CopperheadOS @taviso and
AFAIK, distros/linux-distros have short embargoes though. Android is the real problem. Not that.
1 reply 0 retweets 0 likes -
Replying to @CopperheadOS @benhawkes and
This is a different topic to disclosing actively exploited vulnerabilities.
1 reply 0 retweets 0 likes -
Replying to @taviso @benhawkes and
Google is guaranteeing that they can be exploited by leaking them so widely 30 days early though.
1 reply 0 retweets 0 likes -
-
Replying to @taviso @benhawkes and
Google discloses their Android bulletins + fixes to every Android OEM 30 days early.
1 reply 0 retweets 0 likes -
Replying to @CopperheadOS @taviso and
So there's a 30 day period where in reality, any government etc. that wants access has access.
1 reply 0 retweets 0 likes -
Replying to @CopperheadOS @taviso and
It also means there's a guaranteed 30 day delay to their process. If they take 30 days, it's 60.
2 replies 0 retweets 0 likes
I regret replying, I thought we were discussing disclosure of actively exploited bugs.
-
-
Replying to @taviso @CopperheadOS and
I don't know anything about Android's process, sorry.
1 reply 0 retweets 1 like -
Replying to @taviso @benhawkes and
Just felt like complaining. Adobe did way better than Google can manage for Android right now...
1 reply 0 retweets 0 likes - 4 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.