fulldecent

7 ms·

1. 31.▲
   by fulldecent 9y ago

   Very nice LOL here.
2. 32.▲
   by fulldecent 9y ago

   Native English speaker. Very jet-lagged. Posted from Doha airport and blogspot.com kept redirecting to that other domain. Thank you, I have made many corrections now.
3. 33.▲
   by fulldecent 9y ago

   Thank you for taking the time to reply. @jacquesm, @komali2, @LanceH, I have made many typographical corrections and given you credit where due.
4. 34.▲
   by fulldecent 9y ago

   I realized that life is shorter than I expected and I started putting some affairs in order. This is something I had wanted to do for a while and now any consequences are less important to me.
5. 35.▲
   by fulldecent 9y ago

   YES. Many authors love to write more than the readers love to read them. FIRST, be reasonable. This is a good life axiom. Don't expect a large organization to confirm, engineer, test certify, and deploy a change that requires external
6. 36.▲
   by fulldecent 9y ago

   That's how I started the discussion with Zecco. The next phone call had the FBI on the line. Then I signed the NDA. Next time I would change 30 to a reasonable number. In this case (multiple vendors and a large installed base) maybe ev
7. 37.▲
   by fulldecent 9y ago

   Also, the company was sold. Not class action, but if they did not properly disclose this then there could be liability there.
8. 38.▲
   by fulldecent 9y ago

   Surely Raneri had no authority to speak for FBI. BUT actually this vuln may have been from upstream with Penson. And then it may affect many broker-dealers. They have many clients in US and Canada. (Don't laugh that such a ridiculous v
9. 39.▲
   by fulldecent 9y ago

   Yes, you are correct. I am guilty as charged. Motivation was clickbait and/or fear that people would not understand the latter.
10. 40.▲
    by fulldecent 9y ago

    Thank you and I am sorry that my blog has offended your browser. Would you like to recommend a better hosting service I could use instead of the wildly antiquated Blogger? I would like to migrate to my own domain with Jekyll or something. B
11. 41.▲
    by fulldecent 9y ago

    This is good thinking. But you need iron tight wording when spelling this stuff out. In your contact with companies you should say "Failing to fix this issue would be a violation of reasonably assumed security practices as required in
12. 42.▲
    by fulldecent 9y ago

    Thanks for sharing, I remember seeing this before. Fun to read again!
13. 43.▲
    by fulldecent 9y ago

    Modifying a data: url is a feature not a bug.
14. 44.▲
    by fulldecent 9y ago

    Yes, this is my new IJDGAF policy. The phone call was a losing proposition from the beginning. However if the FBI and NCFTA were /genuinely/ interested in disclosing this in their forum for other banks then maybe my phone call wit
15. 45.▲
    by fulldecent 9y ago

    Just asking for a friend, but Pennsylvania and California are two-party recording states. Is there a statute of limitations after when releasing an undisclosed recording between a Pennsylvanian and a Californian would not be considered an o
16. 46.▲
    by fulldecent 9y ago

    I like your definition better than "a trade that requires paying a fee to a local bureaucracy."
17. 47.▲
    by fulldecent 9y ago

    Thank you, and also parents. This discussion is very relieving for me.
18. 48.▲
    by fulldecent 9y ago

    Yes.
19. 49.▲
    by fulldecent 9y ago

    When they were drafting the "contract", the concept of consideration was very interesting. I had considered that if I would receive cash for agreeing to not disclose then this would be blackmail which apparently is bad.
20. 50.▲
    by fulldecent 9y ago

    Basically, per our phone call, my consideration was duress. As in "sign this or else..."
21. 51.▲
    by fulldecent 9y ago

    It would be very nice if your security disclosure report included a section about how you have provide good faith upfront notice to the vendor and that based on research and belief it would be negligent for the company to not fix the issue
22. 52.▲
    by fulldecent 9y ago

    You have reached zugzwang in game theory parlance. The correct solution before this was to make an announcement: "Here is the announcement I have made disclosing the problem. It is in both our best interest that it get fixed before pub
23. 53.▲
    by fulldecent 9y ago

    This is not spite, please see full reply to parent.
24. 54.▲
    by fulldecent 9y ago

    Yes, this is why I don't use LastPass. As soon as I saw this I realized they must be a joke.
25. 55.▲
    by fulldecent 9y ago

    Interesting idea. Thank you for sharing. Is the goal just anonymity? Technically we already have solutions for anonymous disclosure of documents. Are there other benefits?
26. 56.▲
    by fulldecent 9y ago

    Here's what really happened. I talked with my doctors and realized that I only have so much time left to live. Writing this article was of the items about putting my affairs in order. So short term this was a good decision. Otherwise,
27. 57.▲
    by fulldecent 9y ago

    Thanks for the support! So glad to see supportive people that recognize what is going on here.
28. 58.▲
    by fulldecent 9y ago

    Thank you, I have posted an update to address this, including credit to you.
29. 59.▲
    by fulldecent 9y ago

    And even more general. Any form of profit will attract the possibility of defending yourself in court.
30. 60.▲
    by fulldecent 9y ago

    Thank you, going forward this looks like a great start. And I have always had great experience reaching directly to Googlers when needing connections or technical advice.