Posts by zmanion@infosec.exchange
 (DIR) Post #B5rP1YdKWLI5L8Y6ee by zmanion@infosec.exchange
       0 likes, 0 repeats
       
       @gregkh @joshbressers @wdormann @Viss so there's absolutely no middle ground? When there is clearly a bug with security impact, give the distros list a week notice (two weeks max, per their policy). If it leaks, outcome is no worse than not notifying distros. The researcher can even do it instead of the kernel. At scale (Linux!) this seems like a Pareto distribution: major distros cover disproportionally most users.