4 ms·
There is a point where the potential consequences of a software flaw are so great that failing to fix it properly - after being informed of it - can understanda
by argvargc 5y ago
There is a point where the potential consequences of a software flaw are so great that failing to fix it properly - after being informed of it - can understandably be seen as negligence.
- neiman 5y agoAs far as I understood they fixed the first bug. This is a new one.
- meowface 5y agoIt's not clear if the author reported the newly found vulnerabilities, though. I think most security researchers agree that public disclosure is the only recourse if an entity repeatedly refuses to acknowledge or fix a serious vulnerability. But you have to give them fair opportunities to understand and try to address the vulnerabilities before resorting to that.