3 ms·
Of course there was never any question that any new penetration testing I would do with them would be under NDA. What worried me is that the disclosure may not
by Titanous 14y ago
Of course there was never any question that any new penetration testing I would do with them would be under NDA. What worried me is that the disclosure may not be made public if I was under a NDA that prevented me from publishing it. I didn't want to have any professional or ethical conflicts.
- tptacek 14y agoYou were right: once you had engaged a unit of Salesforce for an app test, it would have been extremely difficult for you to publish this. Not black-letter impossible, but difficult.
- novalis 14y agoThe retroactive part of the deal was a clear ominous alarm and you acted accordingly. I find great joy in knowing that you showed a pristine level of ethic behaviour in your security research. Well done.
- tptacek 14y agoNothing ominous happened here at all.