4 ms·
My largest problem with H1 is how braindead scripted/AI their triage is. - Starting scenario: no way to contact a company outside of H1 (or some other managed
by kay_o 2mo ago
My largest problem with H1 is how braindead scripted/AI their triage is.
- Starting scenario: no way to contact a company outside of H1 (or some other managed programme)
- The company is compromised, their customer support has no idea what this means, they have no security.txt or any other security contact
- I have explicitly told H1 to just forward it with no bounty, I don't want a bounty, only remediation, I do not care about a bounty or any reward
- H1 closes as "not eligible" and tells me to not submit stuff I can't prove it's my compromise by putting my username on it
- Corporate server is still compromised and being used as a proxy to brute force my services
- brumbelow 2mo ago[flagged]
- true_religion 2mo agoIf a company's server is attacking yours, I'd go to legal@company.com before I go to H1.