Settings

Theme

Microsoft says it will not pursue security researchers after zero-day backlash

therecord.media

12 points by nryoo 16 days ago · 1 comment

Reader

nryooOP 16 days ago

Microsoft dropped the legal threat, but it also dropped the phrase "responsible disclosure." The new statement says coordinated vulnerability disclosure instead. That's the term Microsoft itself switched to back in 2010, specifically so researchers who go public wouldn't be painted as irresponsible. Katie Moussouris, who helped make that switch, said invoking "responsible" this time was "the first strike in my book."

Keyboard Shortcuts

j
Next item
k
Previous item
o / Enter
Open selected item
?
Show this help
Esc
Close modal / clear selection