Zagorath
I agree in general, but
Maybe I'm over simplifying it though, I don't know how their org operates.
This is exactly why just sticking to the 90 day standard is better. For the supposed security researcher it's a CYA move at worst.
90 days is just the standard timeframe for responsible disclosure. And normally that's just a baseline with additional time being given if there's genuine communication going on and signs they're addressing the problem.
I just want to point out that "the solstice marks the start of the season" is not a universal fact. Here in Aus, we mark the start of summer as 1 December, and so if I were to take my perspective and apply it to the northern hemisphere, I would say that for you, Christmas is about a third of the way through winter.
The difference here is technically referred to as "meteorological" vs "astronomical" seasons. I've always thought meteorological seasons make far more sense because they much better reflect reality. Winter is defined by cold weather and short days. The winter solstice is already very cold and it has the shortest day. It is absurd to put the shortest day at the very beginning of winter. If you wanted to have an astronomically-based calendar, the solstice should mark the very midpoint of winter, with the season starting precisely halfway between then and the autumnal equinox.
But also, as the other user mentioned, some places have entirely different season systems. Seasons are, fundamentally, a human creation. The notion that weather patterns change throughout the year is a universal fact, but what we call those changes and how many categories we separate it into is human. Many cultures have their own systems with more or different seasons. Many tropical areas have traditionally only observed "wet" (or monsoon) and "dry" seasons. In ancient Egypt, the flooding of the Nile marked an important seasonal change. And South Asia uses a variety of different 6-season systems, such as the Hindu, Bengali, and Tamil calendars.
They're known specifically for being pro-Russia, which is what made the comment amusing.
If they were really "the hero", they'd follow the bare minimum of responsible disclosure best practices, and allow 90 days between privately alerting them of the issue and going public with it. Two weeks is absurd.
Cadbury Bubbly does it too, though sadly I haven't seen any of it on shelves (apart from the mint variant, eww) for a few years.
Every one of Innuendo Studio's videos are absolutely excellent.
Why would you say something so controversial yet so brave?
Oh I see, interesting. I guess they're named after the fact that normally they're at a restaurant?
The Wikipedia article was...interesting. The first paragraph of the "history" section seemed like someone had removed a sentence at random. "After that initial meeting", without ever having described any first meeting, but having set the stage where such a first meeting might take place. If someone has knowledge & sources about that first meeting, that'd be a great opportunity to improve Wikipedia.
How does one munch at a library? Isn't that usually frowned upon?
Ooh careful. Don't use that phrase. You might trigger the fascists!