‘Project Zero’ Rewrites Vulnerability Disclosure Norms
Psychologically speaking, nothing beats the power of a well-timed deadline. And love it or hate it, Google’s 90-day “Project Zero” deadline for fixing flaws – before they get publicly disclosed – has rewritten bug-patching rules.