3 ms·
This is why the so called responsible disclosure isn't a silver bullet. I believe, in cases when there is no bounty program and no substantial risk for the user
by jakobdabo 6y ago
This is why the so called responsible disclosure isn't a silver bullet. I believe, in cases when there is no bounty program and no substantial risk for the users' data or resources, one should go with full, anonymous disclosure.
- ic4l 6y agoThis is very hard because the actual research required you to use real accounts, and you would need to contact them to correct your account after you proved it was indeed an issue.