4 ms·
This has been discussed a few times before on HN and I shared the anecdote that I have attempted to report multiple serious security issues to Google and Facebo
by crunchlibrarian 8y ago
This has been discussed a few times before on HN and I shared the anecdote that I have attempted to report multiple serious security issues to Google and Facebook and have been completely ignored, 100%.
There is a tiered internet nowadays, if you go real name and have a following you are treated quite differently from everyone else. You can't even get a response to emails or forms, much less paid out a bounty if you're not in the former group. The algorithm has made everyone who isn't a minor celebrity irrelevant. I don't care how much it benefits the corporations interested in marketing to me, I don't want a following, thanks.
Fortunately being able to "crash google" at will during cocktail parties and job interviews always impresses people, so I guess I'll just keep on doing that until they fix the problem.
- CydeWeys 8y ago"Crash Google" in what way?
- saganus 8y agoHow viable would be to write a blog post about it so it gets some attention? Much like what happens when someone gets banned and posts an article on it, to get someone on the inside to notice and help out. Or is that too risky even if you censor the juiciest details?
- usepgp 8y agoI think your idea of "serious security issue" differs from googles. nobody cares if you can cause a local crash with some bad js in the console.
- phyzome 8y ago"Completely ignored" doesn't sound right. Did they truly ignore you, or did they say "that doesn't qualify"?