A Tale of 2 Vulnerability Disclosures
projectblack.io
You're out for a stroll and spot a house with its front door wide open. Out of concern, you try to inform the owner about the door. Unexpectedly, the owner snaps back, insisting the door is shut. This is a story about the worst vulnerability disclosure process I've ever experienced.

When a vulnerability disclosure doesn’t go how you expect.::You’re out for a stroll and spot a house with its front door wide open. Out of concern, you try to inform the owner about the door. Unexpectedly, the owner snaps back, insisting the door is shut. This is a story about the worst vulnerability disclosure process I’ve ever experienced.

  • Potatisen@lemmy.world
    2·
    1 year ago

    Mmm, that corpo speak “… That approach doesn’t work for me. Stop contacting me. FULL STOP!”

    Idiot

  • prof@infosec.pub
    1·
    1 year ago

    That’s crazy. Even if it was a sales pitch, being sued for damages once someone exploits this would be immensely more expensive than just paying the security consultant to help you set it up properly in maybe not even a week.