• Devorlon@lemmy.zip
    link
    fedilink
    English
    arrow-up
    10
    ·
    8 months ago

    There have been cases [1] where vulnerabilities in software have been found, and the researcher that found it will contact the relevant party and nothing comes of it.

    What they’re suggesting is that the researcher who discovered this might have already disclosed this in private, but felt that it wasn’t being patched fast enough, so they went public.