News for hackers. Stuff that matters.

A comment on Heartbleed disclosure timeline: who knew what and when. Parent comment

Re:Heartbleed disclosure timeline: who knew what and when by asperous on Monday April 14, 2014 @09:35PM (#7589864)
It's only fair to publicly disclose immediately. You can't possibly alert every trustworthy company on earth.

Now, if you want a bug bounty, you have to file a report and wait a certain amount of time before you are allowed to disclose.

[ Parent | on HN ]
Re:Heartbleed disclosure timeline: who knew what and when by baby on Monday April 14, 2014 @10:05PM (#7589955)
You don't want to disclose it before releasing a patch.
[ Parent | on HN ]