News for hackers. Stuff that matters.

A comment on Google reveals fistful of flaws in Apple's iMessage app. Parent comment

Re:Google reveals fistful of flaws in Apple's iMessage app by Wowfunhappy on Tuesday July 30, 2019 @08:49PM (#20570734)
Overall, sure, but Project Zero follows responsible disclosure.
[ Parent | on HN ]
Re:Google reveals fistful of flaws in Apple's iMessage app by cptskippy on Thursday August 01, 2019 @10:38AM (#20584043)
Calling something "responsible" doesn't make it so. When Google first started this "responsible" disclosure in October of 2014 with Microsoft, Microsoft had a fix setup to be released on Patch Tuesday and asked Google if they could wait to disclose it until then. A mere two days. Google refused and released details on Sunday.

How was releasing the details 2 days early responsible or beneficial? At best it got customers worked up and made them question Microsoft's patch policies.

Do you think in the intervening 2 days anyone took any actions knowing the patch would arrive Tuesday?

Google hides behind "responsible disclosure" as an excuse for using Project Zero tactically to do PR damage to competitors.

[ Parent | on HN ]