3 ms·
> but hidden better so that random researchers won't stumble on it. > 2020-12-02: Zyxel requests more information about how the vulnerability was discovered H
by 8organicbits 6y ago
> but hidden better so that random researchers won't stumble on it.
> 2020-12-02: Zyxel requests more information about how the vulnerability was discovered
Hmm
- doesnt_know 6y agoThis is probably a fairly hot take but I believe that researchers shoudn't normanize providing this level of detail unless they have been explicitly hired to do so. The industry is pretty messed up and it sometimes feels like researchers/pen testers/bug hunters are effectively subsidizing and protecting shitty security practises.
- albntomat0 6y ago> The industry is pretty messed up and it sometimes feels like researchers/pen testers/bug hunters are effectively subsidizing and protecting shitty security practises. In my opinion, this is a result of there being little/no consequences of being breached due to incompetence. Zyxel isn’t losing anything from this, and has no incentives to be better.