vulnerability disclosure
Vulnerability disclosure is the ritual in which organizations boast to the world about their security holes, all the while hoping someone else will fix them. The reporter is crowned the “ethical hacker,” and suddenly a new team member known as the “firefighter” is born within the company. Timing the disclosure to the brink of actual damage is thought to add an extra thrill, turning risk management into a carnival.