# Vulnerabilities Equities Process and Threat Modeling

DevFeed: [Vulnerabilities Equities Process and Threat Modeling](<https://devfeed.tech/articles/vulnerabilities-equities-process-and-threat-modeling-37108.md>)

Original publisher: [Read original article](<https://shostack.org/blog/vulnerabilities-equities-process-and-threat-modeling/>)

Author: Adam

Published: 2017-11-20T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Security](<https://devfeed.tech/topics/security.md>), [configuration](<https://devfeed.tech/topics/configuration.md>)

Tags: [configuration](<https://devfeed.tech/tags/configuration.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

The article examines the U.S. Government's Vulnerabilities Equities Process for deciding whether to disclose vulnerabilities to manufacturers. It discusses criticism of the process, new transparency measures, questions about its policy priorities and treatment of public safety, and the distinction between vulnerabilities and configuration or design issues.

## Source excerpt

[no description provided]