Shoot the messenger. SOP.
Maybe someone should tip off Google project Zero about this? Let's see if they mean it that they will hold themselves to the same standard.
Maybe someone should tip off Google project Zero about this? Let's see if they mean it that they will hold themselves to the same standard.
[0]: https://stackoverflow.com/questions/50289065/google-yolo-sto...
[0]: https://twitter.com/sirdarckcat/status/994867632355577862
I'm sure that will go down just fine. FB just got into a lot of trouble over something like that (arguably a lot more serious, but still).
This is seriously denting my continued belief in Google's security chops. I know they have some of the finest security researchers on the planet but this was handled in a ham-fisted and ineffective way so far.
And best of all: without 'partner' status you won't be able to check if has been fixed.
This is a great demonstration how a company can have all of the right talent but still manage to become incompetent through poor organizational policies.