3 ms·
It seems like the matter is a "won't fix" since september 2020. >Responsible disclosure history >This problem was disclosed on 19th August 2020 to the Austral
by jaclaz 4y ago
It seems like the matter is a "won't fix" since september 2020.
>Responsible disclosure history
>This problem was disclosed on 19th August 2020 to the Australian Signals Directorate, with an indicative expectation of a 90-day disclosure period. ASD communicated it to the ATO. At a meeting on 18th September 2020, ATO told us they did not intend to change the protocol, at which point we immediately informed them that we would make a warning to users public on Monday 21st September.
- m1keil 4y agoFrom UI/UX point of view, it even got slightly worse since 2020: The user no longer needs to type the code. Instead, the same code is prompted and the user just needs to click "Accept" or "Decline", with "Accept" being emphasised.
- technion 4y agoIt wasn't entirely clear if this is a disclosure I missed on 21st September 2020, or if they agreed to publish then sat on it for a year and a half. I think the answer is the former - the Youtube has a publish date from September 2020.