Google Project Zero: 90-day disclosure is working, with 97.5% of reported vulns being fixed within 90 days

Topic

New Reply

The details are a little more complicated, but not much. Google’s Project Zero has turned up 1,434 security vulnerabilities in the past four and a hal
[See the full post at: Google Project Zero: 90-day disclosure is working, with 97.5% of reported vulns being fixed within 90 days]

1 user thanked author for this post.

GreatAndPowerfulTech

Reply | Quote

Replies

I’m guessing that Google is not going to notify us about the built-in vulnerabilities whereby they themselves spy on the user.

They can tell me all they want about what everyone else is doing; but until they come totally clean about their own spying, and more importantly, make a reliable way for the user to totally opt out of Google spying on them, I will avoid Google as much as I can.

Group "L" (Linux Mint)
with Windows 8.1 running in a VM

1 user thanked author for this post.

Wheel_D

Reply | Quote

The question on most everyone’s minds. Who appointed Google the boss of the internet?
Also, couldn’t releasing known ways of attacking any programs be a violation of the Fed law?

Thom r

Reply | Quote

Also, couldn’t releasing known ways of attacking any programs be a violation of the Fed law?

Not according to at least a few court decisions, relating to other companies who had their vulnerabilities posted by White Hat Hackers.

-- rc primak

Reply | Quote