Never Give Your Information To 10 Minute Old Startups

Re:Never Give Your Information To 10 Minute Old Startups by jspthrowaway on Friday October 05, 2012 @11:19PM (#4619658)

He submitted this article after the vulnerability was already fixed. (I grant that the initial comment came before.) I'd be inclined to agree with you, overall, save for a couple mitigating factors in this case:

1) The founder's behavior in the other thread, including refusing to notify affected parties.

2) Such a simple mistake worries me about what else might be vulnerable in the application which is built to handle users' backup data, and for that reason alone, I think this article is extremely important right now.

[ Parent | on HN ]

Re:Never Give Your Information To 10 Minute Old Startups by ainsleyb on Saturday October 06, 2012 @12:16AM (#4619777)

Legally, they're now required by law to disclose to their users of a security breach: http://en.wikipedia.org/wiki/Security_breach_notification_la...

Since whomever discovered the bug was able to access others' sensitive information, they have to disclose.

[ Parent | on HN ]