alt Hacker NewsThat approach to disclosure is about discovering vulnerabilities. Talking about something with a published CVE isn't really comparable.
That approach to disclosure is about discovering vulnerabilities. Talking about something with a published CVE isn't really comparable.
I don't understand your point. A published CVE is already public and thus there's nothing really to disclose?