logoalt Hacker News

hluskayesterday at 1:25 PM4 repliesview on HN

I understand the need to shame this platform, but why expose all their clients to this much risk? This disclosure here just named a whole bunch of clients. Why?


Replies

gossameryesterday at 1:47 PM

As I see it he is not the one exposing clients to risk. He is frustrated that no one is fixing it. The company that left themselves open like this are the ones that are exposing their clients.

If this person is doing his best to do the right thing, there are probably other people who know about this vulnerability and are using it without telling anyone.

root-parentyesterday at 1:32 PM

You need to read the article.

show 1 reply
Ekarosyesterday at 2:06 PM

Sometimes shame is only option to get things fixed. Sadly we do not have any reliable government institutions that could mandate immediate shut down of services. Before that only way to get things fixed is public shame.

masfuerteyesterday at 1:52 PM

What's the alternative? Seriously. He's spent six months trying to get them to fix it. The risk is already there.

show 1 reply