China Taking Control of Zero-Day Exploits

schneier.com

7 pointslucioperca2 comments

> No one may “collect, sell or publish information on network product security vulnerabilities,”

So you cannot even inform the general public that, for example, a widely used consumer product has a critical vulnerability?

Yes, the only path is open through the manufacturer, which otherwise would lead to hurting themself.