News for hackers. Stuff that matters.

A comment on AI Is Breaking Two Vulnerability Cultures. Parent comment

Re:AI Is Breaking Two Vulnerability Cultures by tptacek on Friday May 08, 2026 @10:45PM (#48071286)
Right, all I'm saying is that we were asymptotically close many years ago; all that's changed is that nobody can kid themselves about it anymore.

The actual policy responses to it, I couldn't say! I've always believed, even when there was a meaningful gap between patching and disclosing, that coordinated disclosure norms were a bad default.

[ Parent | on HN ]
Re:AI Is Breaking Two Vulnerability Cultures by riknos314 on Saturday May 09, 2026 @02:22AM (#48072359)
What process or mechanism would you prefer to use instead of coordinated disclosure?
[ Parent | on HN ]
Re:AI Is Breaking Two Vulnerability Cultures by akerl_ on Saturday May 09, 2026 @10:50AM (#48075431)
The most common alternative is full disclosure.
[ Parent | on HN ]
Re:AI Is Breaking Two Vulnerability Cultures by DoctorOetker on Saturday May 09, 2026 @09:10PM (#48079980)
I guess people could download (but not install) encrypted patches with an announced key release date+time, so that by the moment it is disclosed essentially everyone is applying the patch.
[ Parent | on HN ]
Re:AI Is Breaking Two Vulnerability Cultures by riknos314 on Sunday May 10, 2026 @03:55AM (#48081911)
That's still coordinated, but by the publicizing of the key
[ Parent | on HN ]