3 ms·
I'm kind of surprised that their reaction is to expect Tavis to continue to volunteer his time to audit the security of their product.
by jrcii 11y ago
I'm kind of surprised that their reaction is to expect Tavis to continue to volunteer his time to audit the security of their product.
- three14 11y agoThey asked nicely. And they don't seem to be able to tell if they've fixed it, so they really have no choice but to beg.
- kzhahou 11y agoThey're asking him to help verify the fix since he's in the best position to do so, having caught the bug. I think this is better than them saying "thanks, we'll take it from here, bye"
- masklinn 11y agoAsking the reporter to check the fix is standard behaviour in my experience, and what I would expect as reporter.
- cmurf 11y agoSomeone isn't understanding where to escalate this, maybe because of the working conditions at Trend Micro suggest that some low level developer would be blamed for this. It's definitely not a developer's fault this isn't audited, and probably not even the product's manager. Seriously the CIO should be fired for this. It's really that unacceptable. It's not just one attack surface exposed by this.