3 ms·
> The bug has since been fixed and Cloudflare has kindly allowed me to publish this write-up. Seems wild that they can deny you the opportunity to publish your
by powerhour 4y ago
> The bug has since been fixed and Cloudflare has kindly allowed me to publish this write-up.
Seems wild that they can deny you the opportunity to publish your findings for 7 months after the fix for a beta product went live. What is that about? Was that a requirement to get the bug bounty? Seems like a great way to encourage finding another buyer instead.
- Aaron2222 4y agohttps://news.ycombinator.com/item?id=32333099 https://news.ycombinator.com/item?id=32333099 > Since some comments are addressing that this happened 7 months ago. Our disclosure policy is to allow researchers to write about us once the issue is fixed, but give us a week heads up before they publish so we aren't surprised, can coordinate any public comms we want to make, FAQs that need to be written for inbound questions from customers, and can tailor our response to the issue at hand. Can answer other questions if you have any.