Security Blog

The latest news and insights from Google on security and safety on the Internet

Disclosure timeline for vulnerabilities under active attack

29 de mayo de 2013
Share on Twitter Share on Facebook
Google

7 comentarios :

ëRiC dijo...

Incredible that this is still debated at all! If you have wide spread software and there is a critical security hole: You fix it! NAO!

7 days is nice as a start. But actually bits and bytes know speed a little different than us puny humans. 7 days is enough to infect the whole world!

30 de mayo de 2013, 6:02
chillzwerg dijo...

Better and faster security. Superb!

30 de mayo de 2013, 11:14
voodooKobra dijo...

I approve of this maneuver. If the vendor doesn't respond after a week, they cannot be trusted to secure their customers.

30 de mayo de 2013, 14:41
killbit dijo...

This is a fantastic policy for companies that are cloud based such as good. However those companies that provide enterprise software a customer has to install and test. is NOT going to be able to fix, test, release to customer, customer pick up the fix, customer test, submit change requests and deploy in < 7 days. You guys are going to expose more customers to these sorts of issues. Why not work with the companies to release guidance if they can't fix the issue. Google has no idea about enterprise customers. No enterprise is going to pick up any software from you they have to deploy.

30 de mayo de 2013, 16:15
Unknown dijo...

I like it. Way to keep us safe :-D

30 de mayo de 2013, 16:37
Anónimo dijo...

Will you also be holding the rest of Google to the same standard?

31 de mayo de 2013, 9:36
Joe Philipps dijo...

Compared to some researchers, this is charitable. A certain proportion of them think full disclosure should be the norm so that the affected parties can begin to mitigate the trouble.

31 de mayo de 2013, 15:27

Publicar un comentario

  

Etiquetas


  • #sharethemicincyber
  • #supplychain #security #opensource
  • android
  • android security
  • android tr
  • app security
  • big data
  • biometrics
  • blackhat
  • C++
  • chrome
  • chrome enterprise
  • chrome security
  • connected devices
  • CTF
  • diversity
  • encryption
  • federated learning
  • fuzzing
  • Gboard
  • google play
  • google play protect
  • hacking
  • interoperability
  • iot security
  • kubernetes
  • linux kernel
  • memory safety
  • Open Source
  • pha family highlights
  • pixel
  • privacy
  • private compute core
  • Rowhammer
  • rust
  • Security
  • security rewards program
  • sigstore
  • spyware
  • supply chain
  • targeted spyware
  • tensor
  • Titan M2
  • VDP
  • vulnerabilities
  • workshop


Archive


  •     2025
    • may
    • abr
    • mar
    • feb
    • ene
  •     2024
    • dic
    • nov
    • oct
    • sept
    • ago
    • jul
    • jun
    • may
    • abr
    • mar
    • feb
    • ene
  •     2023
    • dic
    • nov
    • oct
    • sept
    • ago
    • jul
    • jun
    • may
    • abr
    • mar
    • feb
    • ene
  •     2022
    • dic
    • nov
    • oct
    • sept
    • ago
    • jul
    • jun
    • may
    • abr
    • mar
    • feb
    • ene
  •     2021
    • dic
    • nov
    • oct
    • sept
    • ago
    • jul
    • jun
    • may
    • abr
    • mar
    • feb
    • ene
  •     2020
    • dic
    • nov
    • oct
    • sept
    • ago
    • jul
    • jun
    • may
    • abr
    • mar
    • feb
    • ene
  •     2019
    • dic
    • nov
    • oct
    • sept
    • ago
    • jul
    • jun
    • may
    • abr
    • mar
    • feb
    • ene
  •     2018
    • dic
    • nov
    • oct
    • sept
    • ago
    • jul
    • jun
    • may
    • abr
    • mar
    • feb
    • ene
  •     2017
    • dic
    • nov
    • oct
    • sept
    • jul
    • jun
    • may
    • abr
    • mar
    • feb
    • ene
  •     2016
    • dic
    • nov
    • oct
    • sept
    • ago
    • jul
    • jun
    • may
    • abr
    • mar
    • feb
    • ene
  •     2015
    • dic
    • nov
    • oct
    • sept
    • ago
    • jul
    • jun
    • may
    • abr
    • mar
    • feb
    • ene
  •     2014
    • dic
    • nov
    • oct
    • sept
    • ago
    • jul
    • jun
    • abr
    • mar
    • feb
    • ene
  •     2013
    • dic
    • nov
    • oct
    • ago
    • jun
    • may
    • abr
    • mar
    • feb
    • ene
  •     2012
    • dic
    • sept
    • ago
    • jun
    • may
    • abr
    • mar
    • feb
    • ene
  •     2011
    • dic
    • nov
    • oct
    • sept
    • ago
    • jul
    • jun
    • may
    • abr
    • mar
    • feb
  •     2010
    • nov
    • oct
    • sept
    • ago
    • jul
    • may
    • abr
    • mar
  •     2009
    • nov
    • oct
    • ago
    • jul
    • jun
    • mar
  •     2008
    • dic
    • nov
    • oct
    • ago
    • jul
    • may
    • feb
  •     2007
    • nov
    • oct
    • sept
    • jul
    • jun
    • may

Feed

Follow
Give us feedback in our Product Forums.
  • Google
  • Privacy
  • Terms