| birdsite | https://twitter.com/hongpong |
| journo work | https://unicornriot.ninja |
| emailz | hongpong at hongpong dot com |
TLDR The 90 day responsible disclosure window was built for a world where bug finders were rare and exploit development was slow. That world is gone. LLMs have compressed both timelines to near-zero. I have seen it first hand, and so has everyone else paying attention. This post lays out why the old model is broken, with real stories, and makes one ask to the industry: treat every critical security issue as P0 and patch it immediately.
TLDR The 90 day responsible disclosure window was built for a world where bug finders were rare and exploit development was slow. That world is gone. LLMs have compressed both timelines to near-zero. I have seen it first hand, and so has everyone else paying attention. This post lays out why the old model is broken, with real stories, and makes one ask to the industry: treat every critical security issue as P0 and patch it immediately.
RE: https://mastodon.social/@UnicornRiot/116581976273915975
my latest report for Unicorn Riot on the left and progressive groups challenging the establishment in Philadelphia - deep dive
Unicorn Riot