I came across this term recently in a mail chain. Google tells me there is a term zero-day bug and that Microsoft and Adobe are the frontrunners :)
Is there such a term as day one bug? What might that mean?
A day-one bug is a defect that is not a regression. The defect was there from day one when the feature was implemented. It is used to argue that a defect is low priority, because it has been shipped in previous releases without many complaints from customers.
By this definition, would a day one bug would one where an exploit is developed the second day of developer awareness?
However, from Infoworld.com
They further quote Justine Aitel, CEO of Immunity as stating
I suppose you could infer from this definition that a "one day bug" would be a meaningless term, or I guess you could say it's one for which a patch exists in the public, but which the user has not applied the patch to.
A "day one" bug is simply a bug that has been around a long time (day one being the software's creation date), as compared to a "regression", or recently introduced bug. When analyzing a problem which has just been reported for the first time, it is general practice to focus on recent changes to the software as the most likely source of the problem. Some bugs however, lead a charmed life and lay dormant for years (or even decades) without being noticed. In my experience as a developer, day one bugs generally are masked by other software that repairs the damage or prevents the bug from being exercised; seemingly unrelated changes can remove one of these "compensating factors" which allow the original bug to finally manifest and be noticed. I found a bug in 2012 in code that I wrote in 1986 and which had processed billions if not trillions of transactions at hundreds of installations before its first crash. I spent several days convincing myself (by constructing elaborate tests) that the bug was truly day one.
The term "zero day" is totally unrelated to the much older "day one".
Ask the person who used the expression. It is not widely-enough used for a generally-agreed-upon definition to exist.
A "zero day exploit" is a security exploit that the developer of the software (or the security community in general) has known about for 0 days (i.e. not yet) so that there can't be a fix. Extrapolating from that, a "one day exploit" would be one that has become publically known today, so if the developer and the users act fast, a few systems may already be patched.
But that extrapolation is not necessarily correct, the expression may not have anything to do with zero-day exploits. Brian's answer actually sounds more likely. Which leads us back to my first paragraph.
Thank you for your interest in this question.
Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site.
Would you like to answer one of these unanswered questions instead?