Mike (@theomegabit.xyz)

Seems like a generally good thing here. I understand where he’s coming from with unnecessary panic. But is that enough of a reason to not put more pressure on companies who are generally not focused on transparency as a whole? #cybersecurity www.schneier.com/blog/archive...

loading . . .

Google Project Zero Changes Its Disclosure Policy - Schneier on Security Google’s vulnerability finding team is again pushing the envelope of responsible disclosure: Google’s Project Zero team will retain its existing 90+30 policy regarding vulnerability disclosures, in which it provides vendors with 90 days before full disclosure takes place, with a 30-day period allowed for patch adoption if the bug is fixed before the deadline. However, as of July 29, Project Zero will also release limited details about any discovery they make within one week of vendor disclosure. This information will encompass: The vendor or open-source project that received the report ... https://www.schneier.com/blog/archives/2025/08/google-project-zero-changes-its-disclosure-policy.html