alt Hacker NewsYou stated that you're "sitting on one that doesn't even require an internet connection [..] I'm waiting for my model to go EOL before I release it"
I read this as "Wait until the model is EOL, hoping it won't be disclosed and fixed until then and also not fixed afterwards"
Is this not what you meant to say?
Replies
MrGilbert • today at 7:30 AM
This would be one way to interpret it. Another way would be: "If the model is EOL, the potential attack surface gets lower, because you cannot buy it any longer and the amount of devices in use will reduce over time."
On a different note: Are you, in any way, affiliated with LG? You read to me as someone who is "unhappy" with the findings.
➕ show 1 reply
Responsible disclosure makes sense when the user and the manufacturer have the same goal of the product being secure. Jailbreaking is a case where the user and the manufacturer have opposing goals: the user wants to be in charge their hardware, the manufacturer wants to prevent the user from being in charge of their own hardware. Responsible disclosure doesn't make sense, the manufacturer would just patch the vulnerability before users could use it.
If manufacturers had a sanctioned way for the user to get root access to their own hardware, responsible disclosure would've made sense, but as it is, vulnerabilities are a useful tool for the owner of the device.