6 ms·

I think he reached out to the support team instead of the security team. Pretty stupid of the support team to not take security bug reports seriously.

• asto 14y ago
  I'm not very surprised. If he told me about it, I would find it quite hard to believe that Google's programmers made such an error too.
  • fletchowns 14y ago
    It's always the assumptions that get you.
    • yuliyp 14y ago
      This. A thousand times this. Especially when investigating security issues, assume everything could be vulnerable or broken until proven otherwise.
  • SaketJajodia 14y ago
    Even I was shocked when I 1st show this bug..
• SaketJajodia 14y ago
  Ya because at that time I wasn't able to find any way to get in direct contact with them via phone call..