3 ms·
No contact or thanks has been received back so far :)
by mellosouls 3y ago
No contact or thanks has been received back so far :)
- MrBruh 3y agoI wasn't expecting a bug bounty, but not even a 'thank you' does hurt my soul :(
- wt__ 3y agoIf it's any consolation, people these days frequently ignore (or read but don't bother acknowledging) pretty much any email that was intended to be helpful, not just security disclosures.
- PopePompus 3y agoWell, they're incompetent - is it a big surprise that they have poor manners too?
- ryandrake 3y agoYea, and if they were actually breached and there were victims, the first thing they would do is issue a press release telling the world "We Take Security Very Seriously."
- ethbr1 3y agoIs it legally differentiated if they respond to the reporter? Or is there some weird loophole of "We didn't take action because of your message. We just happened to patch the same vulnerability after you mentioned it. We are not aware of any penetrations, because we didn't notice your message"?
- hnfong 3y ago> Is it legally differentiated if they respond to the reporter? Nobody knows. But between taking an unknown legal risk, vs being seen as ungrateful, the choice for legal is quite clear.
- sjfjsjdjwvwvc 3y agoOften when pointing out how people fell victim to a con they won’t thank the person who tells them about the con but rather attack them. Basically they can’t admit to being so stupid as to have bought into a con. On some level you can be happy they didn’t come after you or something. I totally understand how you feel though.
- j-bos 3y agoIt's kind of wild that when businesses lose control of people's personal info, they get no punishment. And when someone saves them from losing people's personal info, they give no thanks. Seems well funded companies are immune from data liability or responsiblity.
- forward1 3y ago"Wild" is the unreasonable expectation your data is "personal" after sharing it with a third party, under a terms of service agreement no less.
- ziddoap 3y ago>terms of service agreement Are those the documents, often dozens of pages of barely understandable legalese word salad, that we've conditioned nearly everyone to click past? While I certainly agree that people share way too much data, I personally think hiding behind "it's in the terms of service agreement" is getting quite tired when they are designed in such a way that you are encouraged to skip past it, and they are worded in such a way that a lay-person doesn't have a chance of understanding what the ramifications of agreeing to the agreement is. Not to mention that, quite often, you don't really have a choice in the matter if you want to have a relatively normal life (e.g. being forced to agree to the terms of service of some random service to submit an application to a job, and not having a job isn't an option).
- forward1 3y agoWhat makes you think you're entitled to anything, let alone a "normal" life, in this world? No one forces you to live in and participate in society, but if you choose to, it's at your own risk.
- ziddoap 3y agoThis reply seems rather… unrelated to my comment. But perhaps it'd be a fun philosophical debate at some other time.
- Narkov 3y agoTo be fair, it looks like it was only patched in the last 24 hours so not totally unreasonable...yet.
- internetter 3y agoit is 11:26:45 EST. Ready. Go. "Hi, we have fixed the issue you reported to us. Thank you so much. We are willing to offer a reward of <x> dollars to you, because you have protected our customers. Please reach out with a payment address or any other questions you might have. Thanks again, Tim from <Large corporation>" and... stop timer. 11:27:38 was that so hard?
- zilti 3y agoIf you have time to fix it, you have time to say thanks.
- deleted 3y ago[deleted]