Comment

Comment by gress

This argument is a general argument for is irresponsible disclosure of 0-days.

You don't need omnicience to determine whether the downsides outweigh the potential benefits to a tiny number of jumpy elite who would have to be constantly following and applying patches.

Notably those patches couldn't be applied blindly - so all of those 'elite' in parallel would have to fully understand the exploit and patches lest these become just another attack vector.

There is clearly no justification for this. This isn't just irresponsible. It's a straight up attack on users.

parent gress 11 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton