Re:Commit that changed my life
by InclinedPlane on Sunday March 03, 2013 @10:57PM
(#5316498)
In my impetuous 20s I did something similar. I was rather ... well, rude, really in pointing out a major security flaw on the forums of one of the more famous tech sites. Things devolved from there and I ended up being banned, though they did fix the problem rapidly even so. Since then I've learned the value of tact.
[ Parent
| on HN ]
I agree about responsible disclosure but that problem had many facets, and I was rather trying to point out rails problem, sadly, using github hole.
Re:Commit that changed my life
by InclinedPlane on Monday March 04, 2013 @12:03AM
(#5316732)
It's a fine line sometimes. I think your commit is mostly defensible. It's really an open question. What do you do when you point out a serious security issue and it doesn't get the attention it deserves? I think your commit definitely proved that the issue was being downplayed far too much. Is there some better middle ground? If proving a vulnerability results in it getting fixed overnight and merely describing it results in it getting fixed never then what's the right course of action?