alt Hacker NewsI understand the need to shame this platform, but why expose all their clients to this much risk? This disclosure here just named a whole bunch of clients. Why?
Replies
gossamer • today at 1:47 PM
As I see it he is not the one exposing clients to risk. He is frustrated that no one is fixing it. The company that left themselves open like this are the ones that are exposing their clients.
If this person is doing his best to do the right thing, there are probably other people who know about this vulnerability and are using it without telling anyone.
masfuerte • today at 1:52 PM
What's the alternative? Seriously. He's spent six months trying to get them to fix it. The risk is already there.
Sometimes shame is only option to get things fixed. Sadly we do not have any reliable government institutions that could mandate immediate shut down of services. Before that only way to get things fixed is public shame.