News for hackers. Stuff that matters.

A comment on Slack account takeovers using HTTP Request Smuggling. Parent comment

Re:Slack account takeovers using HTTP Request Smuggling by andrekorol on Friday March 13, 2020 @01:39PM (#22569191)
What do you mean by "it fell behind the cracks regarding disclosure"?
[ Parent | on HN ]
Re:Slack account takeovers using HTTP Request Smuggling by harrier on Friday March 13, 2020 @01:58PM (#22569382)
After the issue was resolved the reporter was asked to wait before disclosure. The reporter waited three months before asking about it again. After that there was response but it took another month the approve the disclosure.
[ Parent | on HN ]
Re:Slack account takeovers using HTTP Request Smuggling by andrekorol on Friday March 13, 2020 @03:27PM (#22570165)
Oh, now I get it. Thanks for the clarification.
[ Parent | on HN ]