Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Unfortunately, it's not so simple. Alerting the public before a fix is out is a double-edged sword: it also means malicious attackers have a chance to replicate the finding and abuse it.


Then perhaps the flow should be amended: Alert the public after the fix, or after a week, whichever is the earlier.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: