Timeline for Is a responsible disclosure for hardware-based vulnerabilities even possible?
Current License: CC BY-SA 4.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 26, 2023 at 14:19 | comment | added | R.. GitHub STOP HELPING ICE | @ruakh: It takes confidence/arrogance? No, just experience/knowledge of history. | |
| Apr 26, 2023 at 2:28 | comment | added | ruakh | I don't really agree with your second paragraph. Hardware vulnerabilities often have software or firmware mitigations; and even if not, vendors may be able to deliver timely mitigations to particularly sensitive customers (e.g. cloud services providers, who in turn have many customers that might be affected). I'm sure it's sometimes the case that there's no benefit in giving the vendor advance notice, but it takes a lot of confidence (arrogance?) to decide on your own that there's no way a vendor could possibly do anything beneficial that you haven't thought of. | |
| Apr 25, 2023 at 15:32 | history | answered | R.. GitHub STOP HELPING ICE | CC BY-SA 4.0 |