4 ms·
As I mentioned in the reply above, the engineer's response could've been many times better, but you have to agree the bug submitter gave them practically nothin
by Oculus 13y ago
As I mentioned in the reply above, the engineer's response could've been many times better, but you have to agree the bug submitter gave them practically nothing to work with.
- shiven 13y agoClearly, any website the size of FB and its huge resources, needs to have an option for bug submitters to submit bugs in their NATIVE language. I bet if the submitter had written the bug report in Arabic, and FB had a professional translator on their security team (with some technical background), things might have been very different and we may not even be having this discussion.
- santosha 13y agoSure, the guy's bug report was terrible. However, the blame is squarely on FB. It's the security team's job to follow up, and to ask for more information if they don't have all the details. Contrast this with how Google responded when someone posted a Youtube video showing a Chrome exploit - they guessed that it was a Flash-based vector, collected millions of sample files and fuzzed for days to eventually discover the bug - based on a YouTube video that they could have also discarded as 'not a bug' based on lack of evidence.