Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

When I got to “the initial triage was frustrating; the report was dismissed as "Intended Behavior”” I thought well there’s no need to follow ‘responsible disclosure’ then, eh?

I would have been tempted to blog about it immediately. Companies already get a sweet deal by people finding bugs for free, reporting them for free, and voluntarily keeping quiet about them for free; researchers shouldn’t also have to fight to report problems (for free).



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: