Episode 291 - Everyone sucks at vulnerability disclosure

Josh and Kurt talk about recent events around Apple and Microsoft disclosing security vulnerabilities. Microsoft usually does a good job, but Apple has a long history of not having a great bug bounty or vulnerability disclosure policy. None of this is simple, but hopefully you'll have some fun and learn a bit about the whole vulnerability disclosure process.

Show Notes

• Apple 0days
• Microsoft Exchange flaw
• THIS IS HOW THEY TELL ME THE WORLD ENDS
• Linux Foundation Vulnerability Disclosure
• Timezone problem