VDP in Aviation - How It Shouldn't Be Done!

Learn about the challenges and pitfalls of vulnerability disclosure processes in the aviation industry through this 21-minute conference talk from DEF CON 33. Explore real-world experiences from both sides of the disclosure process, examining cases that highlight effective practices alongside problematic approaches that persist in certain sectors of the aviation industry. Discover the sensitive nature of cybersecurity reporting in aviation through concrete examples that demonstrate the good, bad, and ugly aspects of current vulnerability disclosure practices, drawing from the speaker's direct experience in both submitting and receiving security reports within this critical infrastructure sector.