Facebook formalizes policy on disclosing bugs it finds in third-party products @uselinux Facebook will give third-party vendors 21 days to respond to the social media giant after divulging a vulnerability, and 90 days to make reasonable efforts to mitigate the vulnerability. @uselinux