Googles bug-hunters find an exploitable vulnerability in your code, Google tells you about it. You get 90 days to make and ship a fix, and Google tells the world how to use the exploit. If you fail to make it in time, for whatever reason, you’ll consider this unfair. Google is hanging a Damocletian zero-day over the heads of engineering departments, coders, QA teams, companies, shareholders, shareholders. The company announced some changes recently, including two weeks grace.”]

