3 ms·
So you don't report it at all? That would be irresponsible, as the holes would remain. Or you report it anonymously? Then, depending on how you got the access,
by gpvos 13y ago
So you don't report it at all? That would be irresponsible, as the holes would remain.
Or you report it anonymously? Then, depending on how you got the access, they may find out who you are anyway from the logs.
It's a reasonable course of action.
- chimeracoder 13y agoWell, this underscores the problem with the current state of affairs. In general, the person who discovers the vulnerability has every incentive not to disclose it. They have nothing to gain, and they take quite a risk in doing so.