4 ms·

google + "Amex security response team" = eirp@aexp.com also http://www.reddit.com/r/netsec/comments/l2uzj/0day_full_disclosure_american_express/c2pbt39 http:/

• pbhjpbhj 15y ago
  Don't you think then that if you asked their customer services via twitter for a way to report a security issue that the customer service rep should have sent that address?
  • gospelwut 15y ago
    Should have? Maybe. But, with corporations that size it's unlikely. I'm not saying this fall entirely on him, but I feel he didn't exactly do his fullest before puling the trigger on the full disclosure.