Explore a comprehensive conference talk that delves into the complex dynamics of vulnerability disclosure, focusing on how the government is facilitating dialogue between researchers and vendors. Learn about the history of vulnerability disclosure, the various stakeholders involved, and the challenges faced by both researchers and vendors. Discover the efforts to establish common ground principles, build trust, and reduce friction in the disclosure process. Gain insights into the evolving market dynamics, the role of public pressure, and the potential impact of software liability. Examine the importance of transparency, civil society involvement, and the need for ongoing conversations between all parties to improve the vulnerability disclosure landscape.
Don't Hate the Disclosure, Hate the Vulnerability - How the Government is Bringing Researchers and Vendors Together to Talk Vulnerability Disclosure