> Confidentiality is non-negotiable: An undisclosed flaw in a widely deployed package is, in effect, a weapon, and the program is built first to prevent leaks.
OTOH, the Linux kernel considers all AI-found vulnerabilities to be already public.
Even more interesting is how the forced confidentiality interacts with the reporting obligations under the EU Cyber Resilience Act.
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。