3 ms·
Yep, exactly. People reporting vulnerability shouldn't have to beg to do it, they should be able to do it and it's up to the corporations to provide more conven
by zedshaw 16y ago
Yep, exactly. People reporting vulnerability shouldn't have to beg to do it, they should be able to do it and it's up to the corporations to provide more convenient means.
That and I thought it was a pretty cool hack to encrypt a payload using just a shell script and openssl. :-)
- Create 16y agoIf a vendor bothers to fix a security patch, the ad/disclosure is already signed, most of the time. Harvesting the keys from i.e. the bugtraq archive seems convenient enough. But yes, I also like the SSL idea, now if only verisign and comodo would be more trustworthy than the WOT...
- bhickey 16y agoZed, could you make your e-mail address a bit easier to find? I don't use twitter and figured you wouldn't want me phoning you up.