Google Project Zero has changed its reporting rules
-a week after filing a report, it will reveal what project received it
-report filing and expiration dates will also be provided
Goal is to let downstream projects know a security patch is coming
Policy and Disclosure: 2025 Edition
Posted by Tim Willis, Google Project Zero In 2021, we updated our vulnerability disclosure policy to the current "90+30" model. Our goals we...
(googleprojectzero.blogspot.com)
