4 ms·
Yeah... Is it ok to do a public writeup on the same date the vuln was patched without an acknowledgement from the client? I would have scheduled this blog post
by laserbeam 3y ago
Yeah... Is it ok to do a public writeup on the same date the vuln was patched without an acknowledgement from the client? I would have scheduled this blog post at least a week later.
- marcod 3y agoOnce they changed the credentials and no longer share them, this particular issue should be gone, no?
- laserbeam 3y agoMaybe... But bashing the client on the day they patched because they haven't communicated is somewhat shaky. Bashing them a week later is totally cool in my books.
- tgsovlerkhgsel 3y agoWhat "client"? This looks like a researcher reporting a bug for free (or maybe through a bug bounty program). They have zero obligation and the vendor is not a "client".
- jampekka 3y agoWhat client? They haven't even answered the guy's email.