you are viewing a single comment's thread
view the rest of the comments
[+] -8 points 7 months ago (2 children)

Against best practice of informing the company first to remediate. Now it’s a security nightmare for anyone running it locally

  • source
  • parent
  • hideshow 2 child comments
  • [–] 11 points 7 months ago

    Once companies started suing people trying to practice "responsible disclosure", I stopped attacking people that choose maximum disclosure.

    Responsible disclosure has always been a bit of a hedge. It's rare to be able to show you are actually the first person/organization to discover a vulnerability.

  • source
  • parent