Matthew Green: harsh vuln triage policies entitle researchers to public disclosure
matthew_d_green · x · 2026-10-29
Cryptographer Matthew Green argues that if a vendor's policy is to only take exploits with execution roots seriously and dismiss other PoCs as informational, researchers are entitled to publicly dump their non-critical findings.
More from Safety
- Why AI sandbox escapes mostly happen in training: alignment must live in RL environments, not rewards — DimitrisPapail · 2026-10-29
- NYT: Chinese spy suspect cultivated close ties with Nvidia CEO Jensen Huang — almmaasoglu · 2026-10-29
- BLA plants fake keys and decoy APIs to derail AI reverse-engineering agents — teortaxesTex · 2026-10-29
- Inside Proton's AI Reckoning: CEO Slams Security Concerns as 'Loser Thinking,' Says It Will Stop Hiring Engineers — 404 Media · 2026-10-29
- MAIN2026 talk: LLMs can verbalize and control their own activations — karimjerbineuro · 2026-10-29
- Meta FAIR's WM-Basin flags 79% of distilled models at 0.1% false-positive rate — dair_ai · 2026-10-29