4 ms·
the author of the blog post didn't publish his email to the guy who's site was vulnerable. Only the site's reply. I could only imagine how the original email to
by chickenheads 11y ago
the author of the blog post didn't publish his email to the guy who's site was vulnerable. Only the site's reply. I could only imagine how the original email to the company was worded.
There's something here about treating someone, even an ignorant idiot (whose only fault is being ignorantly and aggressively presumptuous), with a basic level of professional courtesy. You either foster that basic level of respect or you act like a child in need of attention. I would never hire this security researcher if I read this blog post. Communication is one of our most important skills.
- pm24601 11y agoWho cares about hiring Paul? TPJ is ignoring the vulns that Paul is trying to inform them of discretely. As a consequence of TPJ's attitude - Paul is doing the next best thing of letting TPJ customers know that they are at risk.