News for hackers. Stuff that matters.
Re:CopyFail was not disclosed to Gentoo developer by akerl_ on Friday May 01, 2026 @03:57PM (#47979449)
There isn’t such a thing. Coordinated disclosure (sometimes called responsible disclosure by people who want to inject their morals into one available option so as to paint the others as irresponsible) exists. As has been noted, some large groups like Project Zero use 90/+30, but that isn’t a set protocol; it’s a thing some folks picked and others have copied. If a research group announced tomorrow that they were doing a flat 42 days from notification to release, they would still be doing coordinated disclosure.

There are no comments on this comment yet.