+- Sinisterly (https://sinister.ly)
+-- Forum: General (https://sinister.ly/Forum-General)
+--- Forum: The Lounge (https://sinister.ly/Forum-The-Lounge)
+--- Thread: Release or wait for an official patch? (/Thread-Release-or-wait-for-an-official-patch)
Pages:
1
2
RE: Release or wait for an official patch? - The Alchemist - 02-21-2013
I agree. You could release the vulnerability alone or release the vulnerability along with the patch unofficially. Its meaningless to wait for them.
RE: Release or wait for an official patch? - craig1985 - 02-21-2013
My honest opinion is that you should release it as long as the patch is there too. It is different on say bug bounties that pay you for finding bugs as the whole "disclosure policy" comes in but with something open source I see no problem in releasing it at all
Just my 2 cents