4 ms·
How is it a bad response? They want to know what data has been exposed and ensure you delete that data. That's data leak 101. Why would you be defensive about i
by cm2187 5y ago
How is it a bad response? They want to know what data has been exposed and ensure you delete that data. That's data leak 101. Why would you be defensive about it?
- yonixw 5y agoThe point being that the IT guy made sure this guy will never try to report on anything again. As they will ".. would be watching .. at our IP address .. while the issue was being fixed." Instead of a normal company having a bug bounty and sometimes even with cash prizes. Do you think google "will watch your IP" after you reported a bug? or will they give yo money? What helps in the short run? and what helps in the long run?
- munk-a 5y ago> Do you think google "will watch your IP" after you reported a bug? or will they give yo money? I honestly think they'll do both - but they won't tell you they're watching your IP because it's needlessly antagonistic.
- olyjohn 5y agoBecause you have no way of knowing if they deleted the data or not from their system. It's a pointless exercise, unless you're just gonna take their word for it.
- b112 5y agoWhen someone is kind, helpful, and goes out of their way to help you, for free!!, you have no business demanding, insisting, or threatening a single thing. Proper response would have been "Wow! Thanks!" and at worst "Please don't share what you saw, and thanks again."
- sbassi 5y ago> They want to know what data has been exposed They should check their own logs instead of relaying on a 3rd party that may not tell the truth. This shows incompetence.
- lazide 5y agoBecause he was clearly trying to threaten him?