Andrew Case @attrc · 02 Sep 2026

Sending in vuln reports on a Friday afternoon takes on a whole new meaning with their policy: """ The write-up stays sealed for 30 days so the vendor has room to ship a fix, then it publishes itself. The clock starts when we send the report, not when the vendor answers. """

Open on X →