4 ms·
I say post the code. That would really light the fire under Virgin's ass. Any person nefarious enough to perform the attack is probably smart enough to figure
by thechut 14y ago
I say post the code. That would really light the fire under Virgin's ass.
Any person nefarious enough to perform the attack is probably smart enough to figure it out anyway.
- kevinburke 14y agoNo thanks... that would cross the line between full disclosure and malice. It should be trivial for anyone who understands HTTP and threads to reimplement.
- rquirk 14y agoI really hope that Virgin are not stupid enough to go after you in some lawyery way over this. I think you are already running a risk by disclosing this at all. The usual next step when a company doesn't show willingness to fix a security problem is that they try and shoot the messenger :-(
- SideburnsOfDoom 14y agoIt should be trivial for anyone who understands HTTP and a for loop to reimplement.