#Xiaomi advisories by Taszk

https://labs.taszk.io/blog/post/114_mi_heap_bof/
https://labs.taszk.io/blog/post/113_mi_rng_predict/
https://labs.taszk.io/blog/post/112_mi_hshake_bypass/

It seems there is some exceptionally dump vendor policy in the works so #NoCVE

@buherator The review progress of Xiaomi on Hackerone is the most unprofessional thing I've seen. It's either their policies, or they just don't really care about software security, or worst case: they don't really have professional employees that work in cyber security.
I mean I can understand the delay fix. But deny bugs like this is another level.