Thoughts on Industry Standards for Vulnerability Discovery Disclosures

[schapper05 (Jason)]

@tgauchat

I don’t know offhand, if Michigan (@earlenceferns) referenced a particular protocol in their arrangements with SmartThings for this particular research and disclosure?

@earlenceferns

For the record, we contacted SmartThings with all details in Dec 2015.

4 months is much longer than I would have waited to publish my findings.