4 ms·
Isn't ~35 days very short for a responsible disclosure timeline? This is extremely sensitive info and from the blog post it sounds like they didn't even warn th
by ghostpepper 7y ago
Isn't ~35 days very short for a responsible disclosure timeline? This is extremely sensitive info and from the blog post it sounds like they didn't even warn the company that they were planning to disclose it.
edit: didn't notice the article does mention the problem was fixed before publishing, although they don't say how well it was fixed
- rolltiide 7y ago> 3fun took action fairly quickly and resolved the problem, but it’s a real shame that so much very personal data was exposed for so long.
- ghostpepper 7y agoAh thanks I missed that on first scan
- dymk 7y agoNot sure how comfortable I am with them posting unredacted map screenshots of PII...