<oembed><type>rich</type><version>1.0</version><title>g4tt0 wrote</title><author_name>g4tt0 (npub16z…e8sln)</author_name><author_url>https://nostr.now/npub16zf05np625wqzz80euvyc2r37y6r2vfwcatj80k4rdjlyqq3sals5e8sln</author_url><provider_name>njump</provider_name><provider_url>https://nostr.now</provider_url><html>bad take and fundentally incorrect&#xA;&#xA;assesment and fixing take time, rollouts even longer, if the bug is protocol level all clients and mints would need to patch before disclosure. Sure the &#39;fix&#39; in this process may be immediate but the rollout and post-patch assessment is very important and takes time.&#xA;&#xA;immediate disclosure benfits only skriptkiddies and malicious actors. These aren&#39;t new ideas, we stand on the shoulders of cybersecurity wizards and years of research on how to best innoculate a in-production coding project from bugs and potential exploits.</html></oembed>