3 ms·
We ought to recognize that others may not understand how to respond to security vulnerability reports. We can use this knowledge to be a little bit more wise in
by btipling 13y ago
We ought to recognize that others may not understand how to respond to security vulnerability reports. We can use this knowledge to be a little bit more wise in our own behavior.
The best approach may be if you are unsure as to what the response will be when you feel like you need to disclose a security vulnerability is to do so anonymously.
- guard-of-terra 13y agoAnd preferably on Reddit.
- kaoD 13y agoOr keep it to yourself and wreak havoc.
- sageikosa 13y agoI'd suggest cheeky mischief over havoc.
- pavel_lishin 13y agoShenanigans.
- josso 13y agoDefinitely anonymously and with a hash of a secret message to prove it was you, in case there'll be a bonus.
- btipling 13y agoIf they don't understand responsible disclosure I doubt they will understand hashing.