Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Right, I just don’t see why they need to publish the actual exploit.


They have not, neither have they indicated that they’re planning to do so.


I thought that was how the 90 day disclosure timeline worked?


After 90 days they just disclose the vulnerability. From there, developing an exploit is still a fairly complex task.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: