5 ms·

I see a whole lot of blowhards running their mouths about potential security problems with the site. I've heard of one actual password-reset vulnerability. If t

I see a whole lot of blowhards running their mouths about potential security problems with the site. I've heard of one actual password-reset vulnerability. If the site were completely full of holes like people claim, there would be scores of "security research companies" clamoring to be the first to name them. Yet we're not seeing that. I'm really not buying it.

borski 13y ago
That's not quite right. The site does have issues. Naming the vulnerabilities is subject to responsible disclosure. Hypothetically, were Tinfoil Security to find any issues, we would disclose them to the feds and give them ample time to fix the issues (which, for the government, would potentially be months) before we went out publicly to name what the issues were.
- 001sky 13y ago
  And the 'bad guys' are likely exploiting anything they've found so far
- tptacek 13y ago
  Post a SHA1 hash or two, here or on Twitter. I believe you, but let's keep it concrete.
  - borski 13y ago
    I hear you, but I can't. I considered not even posting that comment at all, but thought the greater point deserved to be aired.