{"type":"rich","version":"1.0","title":"g4tt0 wrote","author_name":"g4tt0 (npub16z…e8sln)","author_url":"https://nostr.now/npub16zf05np625wqzz80euvyc2r37y6r2vfwcatj80k4rdjlyqq3sals5e8sln","provider_name":"njump","provider_url":"https://nostr.now","html":"bad take and fundentally incorrect\n\nassesment and fixing take time, rollouts even longer, if the bug is protocol level all clients and mints would need to patch before disclosure. Sure the 'fix' in this process may be immediate but the rollout and post-patch assessment is very important and takes time.\n\nimmediate disclosure benfits only skriptkiddies and malicious actors. These aren't new ideas, we stand on the shoulders of cybersecurity wizards and years of research on how to best innoculate a in-production coding project from bugs and potential exploits."}