3 ms·
It's pretty common in my experience, especially from larger companies Recently I reported an issue to a company valued at >$10bil issues were quietly fixed, no
by KomoD 3y ago
It's pretty common in my experience, especially from larger companies
Recently I reported an issue to a company valued at >$10bil issues were quietly fixed, not a single response back, not even a "thank you"
- philsnow 3y agoSome companies intentionally Gray Rock security reports, because they neither want to attract attention by giving bounties, nor do they want attention for not giving bounties. If they just say nothing, the researcher usually just leaves them alone. One could speculate that these companies want to pretend that infosec isn't a problem for them, and if they ignore the "problem", it will go away.