Since it's almost been a year and OBTSv7 is around the corner, I published the long overdue writeup for badmalloc:
https://gergelykalman.com/badmalloc-CVE-2023-32428-a-macos-lpe.html

@gergelykalman @buherator nice 👍

@gergelykalman
@lapcatsoftware

Is there a website where I can review a companys security handling?
E.g. how long they took from initial contact to acknowledgement, bounty handling, etc?
#itsec

@fink @lapcatsoftware I don't know of any such thing

@fink @gergelykalman @lapcatsoftware I remember @thezdi and maybe Microsoft publishing similar info from their programs (ZDI handles multiple vendors), but have no links unfortunately.

@fink @gergelykalman @lapcatsoftware @thezdi Oh and let's not forget Project Zero (data is open on their tracker and maybe they had some stats too?)

@gergelykalman cc: @shellsharks Designer Vulnerability badmalloc CVE-2023-32428