惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

S
SegmentFault 最新的问题
J
Java Code Geeks
V
V2EX
Blog — PlanetScale
Blog — PlanetScale
博客园 - 司徒正美
Hugging Face - Blog
Hugging Face - Blog
F
Fortinet All Blogs
aimingoo的专栏
aimingoo的专栏
B
Blog
A
About on SuperTechFans
有赞技术团队
有赞技术团队
月光博客
月光博客
Microsoft Azure Blog
Microsoft Azure Blog
阮一峰的网络日志
阮一峰的网络日志
腾讯CDC
美团技术团队
大猫的无限游戏
大猫的无限游戏
爱范儿
爱范儿
N
Netflix TechBlog - Medium
C
Check Point Blog
Recent Announcements
Recent Announcements
博客园 - Franky
博客园 - 叶小钗
T
Tailwind CSS Blog

LWN.net comments

tcmalloc's weird hack [LWN.net] Fixed? [LWN.net] mpd [LWN.net] Userspace AX.25 [LWN.net] RIP [LWN.net] My two cents... [LWN.net] pipx [LWN.net] Tragedy [LWN.net] A young man destined for glory [LWN.net] And 'less' won't let you search [LWN.net] A great loss [LWN.net] Sad and shocking news [LWN.net] Easy migration from Clementine [LWN.net] Sad coincidence [LWN.net] GNOME is actually usable thanks to Seth et al [LWN.net] Sad news :( [LWN.net] armhf supports preempt_rt [LWN.net] MusicBrainz accurracy [LWN.net] On open source maintainership [LWN.net] Let's stop here [LWN.net] Not a new thing [LWN.net] uv is indeed great pgmoneta Some comments on this on a Postgres blog feed [LWN.net] uv [LWN.net] going to Debian [LWN.net] Upgrading 64-bit-capable systems to 64-bit kernels? [LWN.net] Free Software foundations Maintainers can wait for code review but not for publish review? A reasonably extreme point of view [LWN.net]
Does Coordinate Vulnerability Disclosure make sense here?...
ebiederm · 2026-06-26 · via LWN.net comments

Does Coordinate Vulnerability Disclosure make sense here?

Posted Jun 26, 2026 15:02 UTC (Fri) by ebiederm (subscriber, #35028)
In reply to: Does Coordinate Vulnerability Disclosure make sense here? by Paf
Parent article: The "Akrites" vulnerability-mitigation project launches

Deduplication is explicitly called out as one of their efforts.

Duplicate bug reports is part of what people have been complaining about.

From a study I saw someone was able to reproduce about 40% of the bugs the top tier model Mythos had found, just by asking other models the equivalent of find me the bug in this file.

So unless everyone who has the resources to use these models to seriously hunt for bugs is in the consortium, it seems unreasonable to expect someone else will not find many of the bugs.

But perhaps this new effort will have enough of the people looking that it won't be a complete waste of time to coordinate disclosure.

If it works it will mean that bugs are patched before they are exploited. Which is good for people using the software. Recent history strongly suggests that can't be counted on.