Re:Unexpected Page Fault In Virtualized Environment Advisory
by cortesoft on Tuesday December 10, 2019 @05:04PM
(#21757365)
Isn't that a pretty standard bug bounty requirement? The idea is that you submit the bug to the company and they fix it before it is disclosed.
[ Parent
| on HN ]
Re:Unexpected Page Fault In Virtualized Environment Advisory
by throwawaymath on Tuesday December 10, 2019 @05:43PM
(#21757691)
It is standard in the sense that it's not uncommon. But about as frequently it's not a requirement. Many companies allow complete or partial vulnerability disclosure once resolution is complete. It's often on a case by case basis and requires approval.