3 ms·
If folks are curious, my initial email back was: “I’m responding to this out of abundance of charity, but given literally no identifying information in the ema
by patio11 5y ago
If folks are curious, my initial email back was:
“I’m responding to this out of abundance of charity, but given literally no identifying information in the email I think there is a high probability I am speaking to a script rather than a human.
What do you want to tell me about what application specifically?”
They responded that they were a human and asked whether there was a bug bounty. I sent them a one word No. They replied “Thanks” and that was the end of it.
I wrote the first email on the thought that it might have been an early career security researcher possibly poorly calibrated on how to reach a security contact, and if I write it in the future, I will probably revise the “human” language as it doesn’t travel as well as I intended it to.
Perhaps:
“It would be more effective in the future to include details about the report or at least about which application you are reporting about to route emails like this effectively.” followed by the query.