3 ms·
In the future, submit it anonymously to https://hackerone.com/ https://hackerone.com/ and let them handle it. You open yourself up to a substantial amount of ri
by meritt 11y ago
In the future, submit it anonymously to https://hackerone.com/ https://hackerone.com/ and let them handle it. You open yourself up to a substantial amount of risk (e.g. massive fines or going to prison) with the upside being a tiny reward or perhaps a "thank you". It's absolutely not worth it to try and be the good guy here.
- Mithaldu 11y agoHorrible idea. If they know who he is, and they find it on there, they're likely to try and hit him with legal bullshit if they're a dumb company.
- meritt 11y agoRight. This is more of advice to anyone else that submitting security vulnerabilities to a company who didn't ask for it is an extremely risky decision to make.