GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    Josh Bressers (joshbressers@infosec.exchange)'s status on Monday, 04-May-2026 02:54:53 JSTJosh BressersJosh Bressers
    in reply to
    • Viss
    • Greg K-H
    • Will Dormann

    @gregkh @wdormann @Viss

    This post got into my head. I think you're right, the days of coordination are over

    So I wrote it down
    https://opensourcesecurity.io/2026/05-vulnerability-economics/

    In conversationabout 3 months ago from infosec.exchangepermalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: opensourcesecurity.io
      The lopsided economics of vulnerabilities
      from Josh Bressers
      There was recently a really good thread about the Copy Fail vulnerability between Will Dormann and Greg K-H. The TL;DR is that vulnerability reporting and disclosure is in a weird state of flux. This discussion got me wondering what’s going on, and I think we’re seeing the extremes emerging of how vulnerabilities have always worked. The middle of the bell curve has been removed. There are three groups in this story. The Security Researchers, the Companies, and Open Source developers. In the above discussion Will is a security research (one of the best I’ve ever seen). Greg is part of open source. There isn’t a great company representative, but that’s OK.
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.