Jeroen van der Ham on principles, examples and difficulties of responsible disclosure

Video
MP4
en de fr
MP4 with subtitles

Jeroen van der Ham is a researcher at the National Cyber Security Centre in the Netherlands (NCSC-NL).

His research interests are in the (developing) ethics of cyber security.

You can find out more about Jeroen van der Ham on his personal website at jvdham.nl or via his Twitter account @1sand0s.

Questions

Which countries have a legal status for coordinated vulnerability disclosure (CVD)?

How many days are usually granted to fix a vulnerability before going public? (Project-Zero in this case)