Kevin Beaumont on Nostr: I gotta say, the Mastodon security disclosure for tomorrow's vuln puts most vendors ...

I gotta say, the Mastodon security disclosure for tomorrow's vuln puts most vendors to shame - and Mastodon are a non-profit doing open source code.

They just emailed me to let me know (I've never contacted them before, they've used the contact address on my Mastodon server) the details, including how it was found, how serious and when time wise the patch will be released during the day tomorrow.

I pay Microsoft 9 figures in licensing at job and they sometimes don't even issue a CVE.