Facebook Debuts Third-Party Vulnerability Disclosure Policy

guest · Sep 5, 2020

Facebook Debuts Third-Party Vulnerability Disclosure Policy
September 4, 2020
https://threatpost.com/facebook-third-party-vulnerability-disclosure-policy/158976/

Facebook has implemented a fresh security vulnerability disclosure policy (VDP) this week – in an effort to explain how it decides when and how to roll out details on various bugs that its team finds in third-party software and open-source projects.

Generally speaking, companies will have 21 days to respond when Facebook files a report; if they don’t, the tech giant “reserves the right” to disclose the bug. If a report is acknowledged, the impacted company then has 90 days (from the time the report is filed) to patch before Facebook goes public.
Click to expand...

However, there are exceptions to these guidelines. For instance, if Facebook determines that disclosing a security vulnerability sooner “serves to benefit the public or the potentially impacted people,” it may pull the rip cord on disclosure: For instance, if a bug is being actively exploited in the wild.

“However…not all bugs are equally sensitive. A high-impact security issue requires much more care before it is publicly disclosed.”
“Fixing an issue requires close collaboration between researchers at Facebook reporting the issue and the third party responsible for fixing it,” according to the VDP.
Click to expand...

Facebook: Facebook's Vulnerability Disclosure Policy

Facebook may occasionally find critical security bugs or vulnerabilities in third-party code and systems, including open source software. When that happens, our priority is to see these issues promptly fixed, while making sure that people impacted are informed so that they can protect themselves by deploying a patch or updating their systems.
Click to expand...

Log in or Sign up

Facebook Debuts Third-Party Vulnerability Disclosure Policy

guest Guest

Log in or Sign up

Facebook Debuts Third-Party Vulnerability Disclosure Policy

guest Guest

Useful Searches