RE: https://infosec.exchange/@breachplease/117489640385495762
This is BY FAR the spiciest episode we've ever recorded. We agree a lot and disagree a lot too. @Secitup was on FIRE.
The one thing we agree on 100% is that if Chainguard's actions aren't met with some significant blowback, coordinated disclosure as we know it is dead.
A ChainGuard CEO just unilaterally broke a coordinated disclosure embargo on a critical PHP vulnerability — posting technical details hours before the agreed release — and the industry is now asking whether coordinated disclosure as we know it just died. Jake Williams and Jess He
Infosec ExchangeBreach Please (@[email protected])A ChainGuard CEO just unilaterally broke a coordinated disclosure embargo on a critical PHP vulnerability — posting technical details hours before the agreed release — and the industry is now asking whether coordinated disclosure as we know it just died. Jake Williams and Jess Hebenstreit break down why that decision may be the final nail in the coffin, a framework for explaining to your board th