search
BRESSER
Trends
- 1Blogger backs curl's policy against embargoing low-severity flaws●I wrote a blog that explains why why the new # curl security policy to not embargo low and medium vulnerabilities is a g
Security researcher Josh Bressers has published a blog arguing that curl's new policy of not embargoing low and medium severity vulnerabilities is a good idea, saying other open source projects should adopt it. He contends that embargoing minor bugs adds burden without benefit for maintainers and users. The move is drawing attention in the open source security community.