3 ms·
I'm curious, did you let them know that this vulnerability exists before you wrote an article and posted it to HN? If you let them know and they ignored you, t
by ddellacosta 14y ago
I'm curious, did you let them know that this vulnerability exists before you wrote an article and posted it to HN?
If you let them know and they ignored you, then I understand that you'd want to write an article and spread it around. It's important that customers know when a company doesn't value their security. At that point, the proper way for them to handle it is to quietly fix it, and then let all their affected customers know so they have a chance to change their security settings.
However, if you didn't give them a bit of time first, then you are doing more damage than good to them--and their customers.
- RKearney 14y agoThey already knew and it was fixed before I posted this.
- ddellacosta 14y agoAnd did you let them know privately before you posted this comment? http://news.ycombinator.com/item?id=4619411 http://news.ycombinator.com/item?id=4619411
- RKearney 14y agoDetails of the vulnerability were not posted until it was patched, which was no more than 60 seconds after that initial post.
- JoeCortopassi 14y agoGiven the severity of the hole, I am thankful that you posted what you did
- adgar2 14y agoSince you presented 2 possibilities here, neither of which are accurate, what is your response to the reality of the situation?