ASUS Vulnerability Disclosure Déjà vu

The HackerOne post recounts a disclosure timeline where a security researcher and CERT/CC repeatedly failed to get a response from ASUS about a critical LiveUpdater vulnerability enabling arbitrary code execution with admin privileges; after months of unsuccessful coordination the issue was publicly disclosed. The piece criticizes ASUS for poor vulnerability handling and customer notification, references a prior FTC settlement, and promotes industry best practices for vulnerability disclosure and coordination.