3 ms·
Obviously this isn't the best way to disclose a security flaw. That does not make it malicious. Sure, there are more malicious people aware of this security f
by thomastjeffery 9y ago
Obviously this isn't the best way to disclose a security flaw.
That does not make it malicious.
Sure, there are more malicious people aware of this security flaw, but there are also more users aware of this security flaw, and the simple steps they can take to mitigate it.
- sdmadf2834 9y agoYep, just saying that if he's not malicious (intending to maximize harm to users), then he's an idiot for disclosing it this way.
- thomastjeffery 9y agoOr just didn't know what the best practice was. Since this is a flaw any user can run into, I wouldn't get so mad about someone who doesn't know best practice running into it. I am much more concerned that such an obvious tractable flaw exists in the first place.