2026-10-21 12:58 UTC
@wirklichniemand@hachyderm.io Because I believe full disclosure is almost always the appropriate action. But here, there's been so much hype and little leaks that attackers are getting the advantage while defenders sit around waiting for the patches anyway. Full disclosure would have given everyone the same lead time to prepare and pressured the push for patches to be prepared for the various impacted systems.
Replies (1)
-
@wirklichniemand@hachyderm.io 2026-10-21 13:04
@cR0w@infosec.exchange Yeah, giving major sites the worry that someone _might_ have an explot without any mitigation sucks. And a head-start for people to look for the vuln without a fix available to anyone else also sucks. OTOH releasing the fix releases the vuln so automated exploit-tools will have RCE available while everyone else is busy patching. Which is why I am torn...