I mean, following proper disclosure procedure requires giving the manufacturer adequate time to patch the vulnerabilities before they are released. Would you prefer they just publish the full how-to right up front, and create a zero-day for anyone (from script kiddies to state-sponsored hackers) to use as they see fit?
And, importantly, it’s not a decision that’s compelled by some sort of hierarchical power structure. Responsible disclosure rules exist to protect everyone who uses the software. Like FOSS it’s a system that benefits everyone which makes it worth participating in voluntarily.
Capitalism sometimes gives a cash prize as well, because of course they do.
Week old substack with “details to follow soon”. This is getting tiring.
I mean, following proper disclosure procedure requires giving the manufacturer adequate time to patch the vulnerabilities before they are released. Would you prefer they just publish the full how-to right up front, and create a zero-day for anyone (from script kiddies to state-sponsored hackers) to use as they see fit?
That response doesn’t sound very anarchist of you
Do you think “anarchy” means you actively try to give zero-day methods to state-sponsored hackers?
And, importantly, it’s not a decision that’s compelled by some sort of hierarchical power structure. Responsible disclosure rules exist to protect everyone who uses the software. Like FOSS it’s a system that benefits everyone which makes it worth participating in voluntarily.
Capitalism sometimes gives a cash prize as well, because of course they do.