Conversation

Notices

1. Yukkuri (iamtakingiteasy@eientei.org)'s status on Saturday, 16-Sep-2023 19:26:33 JST Yukkuri

   • webb
   • r
   • cassidyclown
   @w @cassidyclown @r No information is just as counter-productive as full disclosure before patches are available. "High severity" can mean anything, from trivial XSS to remote shell.
   •  likes this.
   •  (mint@ryona.agency)'s status on Saturday, 16-Sep-2023 19:29:37 JST 

     in reply to

     • webb
     • r
     • cassidyclown
     @iamtakingiteasy @w @cassidyclown @r At the very least full disclosure can make the devs hurry the fuck up. Going "hey, there's a vulnerability, but I'm not going to give a single clue" is just FUD until proven otherwise.