upvote
https://en.wikipedia.org/wiki/Coordinated_vulnerability_disc...

> In computer security, coordinated vulnerability disclosure (CVD, sometimes known as responsible disclosure)

I guess you can learn something new after 36 years.

If you are referring to what you quoted, your pedantry and sharpshooting would result in an incomplete English sentence: "that's why we have the responsible disclosure" is missing a noun. Now that we are firmly in worthless pedantry:

Protocol (n):

1.a. a system of rules that explain the correct conduct and procedures to be followed in formal situations

1.b. a set of conventions governing the treatment and especially the formatting of data in an electronic communications system

If you don't like what I said or disagree, poke holes in factual inaccuracies. However, in the reality that I am pretty sure we all share, responsible disclosure is a well established protocol that is followed by many security researchers, and was imperfectly followed here.

reply
I don't think you're going to bluff your way through this.
reply
From elsewhere.[1]

> You: No, I wouldn't, because my own preferences are towards immediate disclosure.

And there it is. You could have said "I don't think responsible disclosure is a good idea" and moved on, but now we have whatever the fuck this is.

Bluffing sure as hell beats incapable of being wrong. I'll take it.

[1]: https://news.ycombinator.com/item?id=47969417

reply
deleted
reply
What rules were not followed here?
reply
Tons of distros were not informed.
reply