3 ms·
Found a bug like this at my school and reported it a few months ago. The guy who responded to me said he'd fix it but it's still live :(
by antsam 14y ago
Found a bug like this at my school and reported it a few months ago. The guy who responded to me said he'd fix it but it's still live :(
- throwaway125 14y agoI've had similar encounters with privately disclosed vulnerabilities that are still live years after the fact. What is the right course of action here? If you just wait out and the vulnerability eventually gets exploited they could blame whoever reported it "because he was the only one who knew". You can't really anonymously disclose it after privately reporting it either, because they'll quickly link it to who reported it before.