rom1v is a user on You can follow them or interact with them if you have an account anywhere in the fediverse. If you don't, you can sign up here.
rom1v @rom1v

> Why did OpenBSD silently release a patch before the embargo?
> […] As a compromise, I allowed them to silently patch the vulnerability. In hindsight this was a bad decision, since others might rediscover the vulnerability by inspecting their silent patch. To avoid this problem in the future, OpenBSD will now receive vulnerability notifications closer to the end of an embargo.

· Web · 0 · 1