E
EpochZero Team
25 Sept 2026
This is the discussion thread for the lesson "Responsible Disclosure and Dual-Use Ethics" (Research Methodology, Unit 5). Ask questions, share real-world examples, and help classmates who are stuck.
Conversation starters. Try explaining one of these in your own words:
- Define dual-use in security research and explain the core tension it creates between defenders and attackers
- Describe the 90+30 coordinated disclosure lifecycle and explain what happens if the vendor fails to patch within the 90-day window
- Explain how the EternalBlue case illustrates the downstream harm of stockpiling a vulnerability rather than disclosing it