Is it irresponsible? They've revealed barely anything about how it works, besides that the first step is a PDF, and something about Glyph Grift.
Is it irresponsible? They've revealed barely anything about how it works, besides that the first step is a PDF, and something about Glyph Grift.
What is the value of revealing anything at this time point, when no patch is out? What use is it for the public?
Just last Black hat there was a "glimpse disclosure" that was later followed with proper fixes and details. I gave my AI agent the details that were supposed to be "useless", before the patch was out, and it found the vulnerability in less than an hour.
We shouldn't even enter this game. And with the track record of this specific group, I didn't exactly get the impression that their incentive is to help fix things, but rather to promote their brand while others be damned.