logoalt Hacker News

anon_osslast Saturday at 9:48 PM3 repliesview on HN

[flagged]


Replies

socalgal2last Saturday at 11:14 PM

Because not disclosing an actual bug that could affect users would somehow be good?

jsnellyesterday at 1:52 AM

So, this is the report they complained about: https://issuetracker.google.com/issues/440183164

I don't know how a vulnerability report could be much better than that. It is a real vulnerability. The report includes a detailed analysis of where the vulnerability is. The bug has been validated, and the report includes exact reproduction instructions.

How is that a bullshit bug report?

show 1 reply
galaxy_gaslast Saturday at 11:50 PM

The one nice thing is Google had submit a real bug at least.

The human idiot "researchers" will send paragraph long automatically generated extortion threats over not sending HSTS header