Ask HN:How to warn a company about the security issues if they refuse to listen?

Re:Ask HN:How to warn a company about the security issues if... by mindcrime on Wednesday March 06, 2019 @07:48PM (#19324606)

I'd say "forget it, move on, and delete any evidence that any of this ever took place." You stand to gain nothing from this whole exercise, while the downside risk is that you get weev'd[1].

Screw 'em, you don't owe them anything. And if they don't want to fix the issue, it's not your problem.

[1]: https://en.wikipedia.org/wiki/Weev

[ Parent | on HN ]

Re:Ask HN:How to warn a company about the security issues if... by Isammoc on Thursday March 07, 2019 @01:56AM (#19326076)

Sadly, the laws seem to enforce your position. The incentives are biased...

It is a shame that we don't have an organisation, a foundation about this subject.

A place, a website to tell such a risk for user privacy.

Perhaps the RGPD from EU can help?

[ Parent | on HN ]

Re:Ask HN:How to warn a company about the security issues if... by system2 on Wednesday March 06, 2019 @09:14PM (#19325021)

I agree. I am moving on, I am hoping no company gets harmed because of these incompetent people.

[ Parent | on HN ]