Hacker Timesnew | past | comments | ask | show | jobs | submitlogin

Why not publish the existence of the vulnerability without any details?

That is the only information most people will get from the disclosure anyway. Only the black hats are helped by disclosing the details.



Blackhats knowing is what makes companies patch the vulnerabilities. Not enough people care about there being an undisclosed vulnerability for the company to expend resources.


Microsoft doesn't care about fixing vulnerabilities unless Google forces them to?


Not many companies care about fixing vulnerabilities until they actually have to.


Why not fix your bugs in 180 days?




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: