News for hackers. Stuff that matters.

A comment on Problems with the Heap. Parent comment

Re:Problems with the Heap by cenamus on Thursday March 27, 2025 @01:07PM (#43495634)
Yeah shame on the people irresponsibely publishing the vulnerability, but the people putting them in? Who cares
[ Parent | on HN ]
Re:Problems with the Heap by gruez on Thursday March 27, 2025 @02:20PM (#43496418)
>but the people putting them in? Who cares

Literally nobody is arguing this.

[ Parent | on HN ]
Re:Problems with the Heap by cenamus on Friday March 28, 2025 @09:00AM (#43504862)
But everyone is grilling the author for publishing. Maybe they should sell it next time, no negative reaction that way
[ Parent | on HN ]
Re:Problems with the Heap by gruez on Friday March 28, 2025 @10:54AM (#43506211)
>But everyone is grilling the author for publishing

What's the alternative? Having no quality bar for vulnerability reports, and give no pushback for poorly written vulnerability reports, even if they're crayon scribbles on a napkin? I agree that not everyone can write a detailed and thoroughly researched bug report like the ones project zero puts out, but I think most can agree that "you might want to stop using [software]" is well below any reasonable quality bar.

>Maybe they should sell it next time, no negative reaction that way

Yeah I'm sure 0day groups are going to be paying top dollar for weird crashes.

[ Parent | on HN ]