3 ms·
Then they should provide a path that doesn't involve arbitrary NDAs if you're willing to forego the reward.
by RHSeeger 4y ago
Then they should provide a path that doesn't involve arbitrary NDAs if you're willing to forego the reward.
- tptacek 4y agoThat path already exists: it's called "email security@vendor, tell them what you found, ask when a patch is expected, and then tell them they have 60 days".