Unverified50% confidenceFactExact time
The discussion of the ICQ vulnerability exposed the lack of vulnerability disclosure mechanisms at the time—no CVE numbers, no standardized vendor response window—and security researchers often could only publicize problems through mailing lists or forums.
1
Sources
50%
Confidence
Long-term
Relevance
10/16/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe traditional software industry has developed relatively mature standardized disclosure systems such as the CVE (Common Vulnerabilities and Exposures) database, while the AI safety field still lacks such norms.71% similarUnverifiedThe ICQ team's response speed after the vulnerability disclosure was less than ideal, and patch delivery relied on users manually updating, leaving a large number of users exposed to risk for a long time.69% similarUnverifiedIn 1998, the instant messaging software ICQ had a major security vulnerability labeled "Major ICQ security hole," whose core problem was serious flaws in how the client handled user authentication and message transmission.69% similarUnverified发现恶意依赖被安装并不能证明恶意代码真的运行过，命中查询工具应被视为深入调查的理由而非入侵结论68% similarUnverifiedFollowing the AI's zero findings, manual review discovered 6 CVE-level security issues in the curl project.67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1041397API
curl https://kongchang.com/api/v1/knowledge/claims/1041397MCP
get_claim(id=1041397)