undefined | Better HN

0 pointsbelter4y ago0 comments

You have a point there and the researcher has also no obligation of disclosing it to them.

0 comments

4 comments · 1 top-level

latch4y ago· 3 in thread

But they do have obligations that make it otherwise worthless to the them.

They could contact a three letter agency, that's totally legal.

Or they could release information publically, without informing M$

Apparently it would also be legal to sell it to authoritarian regimes a la NSO

sell it to FBI/CIA< and they use it on Azure China run by 21Vianet ?

j / k navigate · click thread line to collapse