Discussion

• @k8em0 @k8em0 on x

  Vulnerability Disclosure Programs (VDPs) & bug bounties typically don't share average time to fix. A great thing about Google Project Zero is that it shares data for bugs it submits, giving us trend visibility for several vendors. Avg time between report received & patch = ATTF h…

• @photomatt Matt Mullenweg on x

  Open source moves faster.

• @rexarul Rex Arul📚 on x

  “Linux as a platform is a lot more secure than Microsoft Windows and Apple macOS, according to new research by Google's Project Zero. The higher rating isn't because Linux is inherently safe and secure. It is because developers maintaining the platform...” https://getpocket.com/.…

• @jorgeorchilles Jorge Orchilles on x

  According to Google Project Zero data, the average time it takes a vendor to fix a vulnerability reported to them is 52 days compared to 80 days, 3 years ago. This is a great report, love the transparency, and look for more vendors to share this data. https://googleprojectzero.bl…

• @drbobljmu Bob Askwith on x

  Info on how quickly software vendors release updates after bug reports: “In 2021, vendors took an average of 52 days to fix security vulnerabilities reported from Project Zero. This is a significant acceleration from an average of 80 days 3 years ago.” https://googleprojectzero.b…