2026-07-23 17:23 UTC
Replies (6)
-
@martinsnygg@infosec.exchange 2026-07-23 17:25
@spacerog@mastodon.social If the coordination isn’t done all thats left is the responsible disclosure?
-
@paul_ipv6@infosec.exchange 2026-07-23 17:28
@spacerog@mastodon.social because big tech wants to hold researchers making disclosures responsible?
-
@vathpela@infosec.exchange 2026-07-23 17:43
@spacerog@mastodon.social I suspect if you're not neck-deep in the subject, "responsible" sounds like what you're being if you coordinate.
-
@spacerog@mastodon.social 2026-07-23 18:31
@matthegap@chaos.social @vathpela@infosec.exchange “Responsible Disclosure” implies that everything else is irresponsible.
-
@spacerog@mastodon.social 2026-07-23 21:08
Since my mentions are busier than they should be on this issue, look up some history… "It's Time to End Information Anarchy" - Scott Culp, Microsoft, 2002 “Narcissistic Vulnerability Pimps” - Official Verizon Blog, 2010 And probably a dozen other referances I’m too lazy to look up right now.
-
@ftp_alun@infosec.exchange 2026-07-23 22:55
@spacerog@mastodon.social I heard it again today. I guess we're trying to persuade an industry that still pushes back on "allow list" and "block list", too.