4 ms·

> Monday (November 21st) the airline was made aware of the issue > Wednesday (November 23rd) resolution has already been tested and deployed That's a pretty n

by throwaway019254 4y ago

> Monday (November 21st) the airline was made aware of the issue > Wednesday (November 23rd) resolution has already been tested and deployed That's a pretty nice response time - compared to some big companies that are asking security researchers to not disclose vulnerability for six months.

sbuccini 4y ago
Especially since the vuln was in a third-party system so the airline couldn't push a fix themselves.
- birdman3131 4y ago
  Depends on if it was a security issue or a config issue. From the end user's perspective they can look the same.
  - rez0123 4y ago
    This was a bug in the WiFi portal’s api. No need for the airline to fix anything. It simply affected their customers.
    - crecker 4y ago
      Good job!
Bluecobra 4y ago
Yeah is really refreshing, I was expecting the worst like the OP getting banned/sued by the airline and detained by the TSA.
- heavyset_go 4y ago
  If I was the author, I'd be kept up at night by the idea of being kidnapped in the middle of the night and whisked off to some black site, however likely or unlikely that is.