News for hackers. Stuff that matters.

A comment on Ask HN: How do I go about responsibly disclosing security vulnerabilities?.

Re:Ask HN: How do I go about responsibly disclosing security... by meritt on Sunday July 05, 2015 @04:29PM (#9834797)
In the future, submit it anonymously to https://hackerone.com/ and let them handle it. You open yourself up to a substantial amount of risk (e.g. massive fines or going to prison) with the upside being a tiny reward or perhaps a "thank you". It's absolutely not worth it to try and be the good guy here.
[ Parent | on HN ]
Re:Ask HN: How do I go about responsibly disclosing security... by Mithaldu on Sunday July 05, 2015 @04:38PM (#9834833)
Horrible idea. If they know who he is, and they find it on there, they're likely to try and hit him with legal bullshit if they're a dumb company.
[ Parent | on HN ]
Re:Ask HN: How do I go about responsibly disclosing security... by meritt on Sunday July 05, 2015 @04:57PM (#9834926)
Right. This is more of advice to anyone else that submitting security vulnerabilities to a company who didn't ask for it is an extremely risky decision to make.
[ Parent | on HN ]