4 ms·

I saw this unfold on infosec twitter, the CEO really dropped the ball on handling this incident professionally. The security researcher did nothing wrong here

I saw this unfold on infosec twitter, the CEO really dropped the ball on handling this incident professionally. The security researcher did nothing wrong here [IMHO], they tried to report a security flaw in the app. CEO got pissed, took it as a attack personally instead of thinking of the responsibility of users safety on the app. (All the while promoting her app as a safe place for users to share sensitive information.[i.e. photos, DOB, address, phone number, GPS location). Sad to see this type of response; the CEO has a lot to learn from this situation about security for users and how to deal with security researchers. Live n learn...

nix23 6y ago
>Sad to see this type of response; the CEO has a lot to learn from this situation about security for users and how to deal with security researchers. This happens when you use twitter and mix your company with your personal matters, you take it personal because your "baby" has a flaw, and not your product. Also, to all the future CEO's, STOP using twitter for anything else then professional matters. You probably don't want to emulate Mr. Trump. Talk about your product, your visions and the cool stuff you achieve with your team. Not about you or the shit you read on others twitter accounts, don't politicize your product but put a vision behind it.