4 ms·

Wow, I can't believe an NSA employee doesn't care about responsible disclosure /s

• saagarjha 7y ago
  He’s a bit sensationalist, to be sure, but the bugs mentioned are ones that should be fixed. (If rather trivial to find…)
  • ilikehurdles 7y ago
    Responsible disclosure means giving the developers a chance to fix the bugs before blasting the methods all over techcrunch.
    • saagarjha 7y ago
      I am aware of what responsible disclosure is; Patrick Wardle doesn't really care for it because he prefers writing up his blog posts as it gives him a chance to speak. But even putting aside his personal flaws, Zoom should fix these issues.
• DyslexicAtheist 7y ago
  why would he or anyone else. they haven't exactly got a history of being open to researchers. the only way to deal with them is by either dropping 0days or selling vulns to whoever pays for them. that's totally justified given how ignorant and apologetic people are about this tire fire of a company
  • angry_octet 7y ago
    At this point, many people prefer to remain ignorant of the risk, so they can continue their lives without change. Just like the CV response. Basically people don't like thinking even one step ahead. What's the consequence of millions of people exposing their private information (PDF bank statements, DOB, scans of their ID docs, etc) via something like Zoom? Massive identity theft and scamming. E.g. people are going to be asked to send money to relatives, and they'll do it. Loans will be taken out using your PII. If you think identity theft is bad now, consider the problem when you can't go to the DMV, your bank, etc. Countries with good digital ID programs (like Germany) and vastly more prepared for this problem.