Open Source Security

By Josh Bressers

Everyone sucks at vulnerability disclosure

=> 🔊 Play episode (35 min) | Direct episode link | 💬 Share episode

Published October 03, 2021 7:00pm

Josh and Kurt talk about recent events around Apple and Microsoft disclosing security vulnerabilities. Microsoft usually does a good job, but Apple has a long history of not having a great bug bounty or vulnerability disclosure policy. None of this is simple, but hopefully you'll have some fun and learn a bit about the whole vulnerability disclosure process. Show Notes Apple 0days Microsoft Exchange flaw THIS IS HOW THEY TELL ME THE WORLD ENDS Linux Foundation Vulnerability Disclosure Timezone problem

=> Return to podcast