It looks like they never replied to him for months so he just published it. This would also fit with the HN title (conclusion in the post). I think if it was patched it would be "I found a bug".
> RIGOL says they would reply in 2-3 days, 1/28/23
> Full disclosure, 2/8/23
Those should be January 28 2023 and February 8 2023, which is the date of the post. It's only 13 days after the last communication from RIGOL, not months.
By the way, could at least us developers use ISO dates instead of whatever our local conventions are?
3 months of total stalling without a real reply to him. The last communication was only that they'd provide more details in a few days.
The fact that he asked again before the disclosure timeframe and they were like "uh, just give us a minute" doesn't change anything.
P.S. sorry for the american time dates, I don't know what I was thinking lol.
2023-28 and 2023-39 aren't any more readable.
RFC3339 is compatible with "the good parts" of ISO8601 and it's also free.
Rigol made their own ADC chip that beats most off the shelf stuff yet they have some of the jankiest software and English translation known to man.