2026-05-07 18:55 UTC
So, uh, can we criminalize dropping 0days on github without doing /any/ coordinated disclosure yet?
Replies (3)
-
@iagox86@infosec.exchange 2026-05-07 19:05
@vathpela@infosec.exchange IMO after we make organizations financially liable for vulnerabilities they negligently introduce, we can talk about how we feel about Full Disclosure
-
@kallisti@infosec.exchange 2026-05-07 19:28
@vathpela@infosec.exchange Yeah, in the interest of decentralization, everyone should drop their 0days on their own website
-
@AMS@infosec.exchange 2026-05-08 00:37
@vathpela@infosec.exchange So long as all the penalties fall on Microsoft.