Technique
technique:responsible_disclosure
Also: coordinated vulnerability disclosure, responsible disclosures, responsible vulnerability disclosure
Process of reporting the Xbox security issue to Microsoft and negotiating publication without releasing the secret key.
Process of reporting the Xbox security issue to Microsoft and negotiating publication without releasing the secret key.
“We want to do the whole responsible disclosure thing”
Process of reporting the exposed information to the affected parties and seeking permission before publishing the details.
“This was done for research and to do responsible disclosure”
“My end goal was to publish a blog post about all this and also fix the problem.”
Reporting a discovered security problem to the affected owner or relevant authorities with remediation guidance.
“I’ve been doing responsible disclosures”
“writing the responsible disclosure e-mail”
A practice of privately reporting security problems to the responsible system owner and helping them fix the issue.
“I have to be very descriptive and I have to stay in conversation with the people who are responsible for the systems”
“there’s a special circumstance that allows for it which is responsible disclosure”
Practice of reporting vulnerabilities privately to affected vendors rather than exploiting or publicly releasing them.
“I basically took the proof of concept and submitted it to Microsoft’s security team”
“I started engaging in responsible disclosure”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Alex | Explicit | 84 |
| incoming | USES | The Guild of the Grumpy Old Hackers | Explicit | 87 |
| incoming | USES | Victor | Explicit | 88 |
| incoming | USES | Daniel Kelley | Explicit | 117 |
| incoming | USES | Daniel Kelley | Explicit | 117 |
Alex USES responsible disclosure
Alex says the activity was done for research and responsible disclosure, including notifying ASD and Qantas.
Explicit Confidence 99% · Jack Rhysider EP 84 Details
“This was done for research and to do responsible disclosure”
The Guild of the Grumpy Old Hackers USES responsible disclosure
The Guild documented the access and reported the vulnerability to Trump and relevant authorities.
Explicit Confidence 99% · Victor EP 87 Details
“Now comes the responsible task of documenting everything”
“The Grumps put their findings and suggestions into an e-mail and sent it over to Trump.”
Victor USES responsible disclosure
Victor has made a long-term practice of filing responsible disclosures.
Explicit Confidence 99% · Jack Rhysider EP 88 Details
“he’s made a life out of filing coordinated vulnerability disclosures”
Daniel Kelley USES responsible disclosure
Daniel submitted the proof of concept for the Microsoft XSS vulnerability through Microsoft's responsible disclosure process.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“I basically took the proof of concept and submitted it to Microsoft’s security team”
Daniel Kelley USES responsible disclosure
Daniel reports that he spent two years responsibly disclosing vulnerabilities rather than exploiting or extorting companies.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“I started engaging in responsible disclosure”