1. 4
  1.  

  2. 5

    An alternate headline: Project Zero finds a vulnerability and promptly discloses it to the vendor, vendor misses the somewhat reasonable responsible-disclosure deadline for fixing it. This is unfortunately totally routine. :/