Cryptographer Matthew Green mulls a Tor-hosted wiki for public vulnerability disclosure

matthew_d_green · x · 2026-10-29

Johns Hopkins cryptographer Matthew Green argued that if a vendor's vulnerability policy is to "only take exploits with execution roots seriously and close others that are PoC as informational," researchers are entitled to dump their non-critical findings publicly. He floated standing up a wiki for such disclosures — possibly running the disclosure endpoint as a Tor hidden service — with spam resistance as the open problem.

Related event: Cryptographer Matthew Green Warns Flawed Disclosure Policies May Force Public Disclosure(2 posts)→

Original post →

More from Safety

Safety channel →