Google Project Zero revises its Disclosure Policy so that it will publicly reveal details of a security flaw precisely 90 days after privately disclosing the details to the relevant vendor. Before this month, under the previous policy, bugs were revealed after 90 days or when fixed, whichever came first.
