3 ms·
When one submits a similar bug on h1, he gets a standard answer - please demonstrate a practical attack vector. Just saying.
by viach 8y ago
When one submits a similar bug on h1, he gets a standard answer - please demonstrate a practical attack vector. Just saying.
- GalacticDomin8r 8y agoAlso forgot step 1a, which is get your subtitle right. The title at least is mildly interesting.
- palant 8y agoYes, bug bounty programs usually dislike being told about inherent architectural issues. So far I've only come across one where all security-relevant feedback is welcome: Mozilla. Which is exactly why I'm not submitting this via the bug bounty program. This way it's far more likely to reach somebody who is responsible for the code.