2 ms·
I don't get why security researchers have so much patience with companies and lawyers like this. If I did a responsible disclosure and were threatened with lega
by dtx1 6y ago
I don't get why security researchers have so much patience with companies and lawyers like this. If I did a responsible disclosure and were threatened with legal action i would do my utmost to cause as much damage to that company as humanly possible, including leaking all the data i gathered and ignoring all responsible disclosure deadlines. Maybe then companies would start to learn that this behavior is beyond unacceptable or die off from the results.
- _jal 6y agoIf the goal it to spend less time listening to lawyers, I don't think that strategy is going to work very well.
- dtx1 6y agoDepends if you are dumb enough to disclose any vulnerability without a bug bounty program without protecting your identity. There are enough horror stories out there that an anonymity-first strategy is obviously a good idea.