4 ms·
My opinion - something so trivial as private data sent in plaintext isn't a bug or a security hole, it's bad by design. You shouldn't have to notify someone the
by jneal 14y ago
My opinion - something so trivial as private data sent in plaintext isn't a bug or a security hole, it's bad by design. You shouldn't have to notify someone they've designed their app poorly. If he was taking advantage of a security hole, or something of that nature that wouldn't already be known to the developers, then I could see notifying them before publishing.
- danso 14y agoThis is an excellent point. Fixing a design flaw this inherent is going to take more than a weekend of frantic dev time. It could conceivably take weeks to implement an overhaul to their framework, all the while the users are vulnerable.
- andrewljohnson 14y agoThey could theoretically take the app down, or issue a warning to users. On the other hand, this article does little to alert users, while blithely informing techies, some of whom are likely to be hackers of some order.