Open Source Security

By Josh Bressers

Everyone sucks at vulnerability disclosure

🔊 Play episode (35 min)

Direct episode link

💬 Share episode

Published October 03, 2021 7:00pm

Josh and Kurt talk about recent events around Apple and Microsoft disclosing security vulnerabilities. Microsoft usually does a good job, but Apple has a long history of not having a great bug bounty or vulnerability disclosure policy. None of this is simple, but hopefully you'll have some fun and learn a bit about the whole vulnerability disclosure process. Show Notes Apple 0days Microsoft Exchange flaw THIS IS HOW THEY TELL ME THE WORLD ENDS Linux Foundation Vulnerability Disclosure Timezone problem

Return to podcast