Re:Ask HN: I know how to reset any Nexmo.com account, but no...
by marcuzhn on Friday July 24, 2015 @11:46AM
(#9942775)
I am not sure why all this hate, as I said we fucked up the way the initial ticket has been handled and it's sorted now. :P FYI we plan to release the fix shortly and sebiw has already been rewarded via our official bug bounty program.
Re:Ask HN: I know how to reset any Nexmo.com account, but no...
by monatron on Friday July 24, 2015 @11:56AM
(#9942844)
You're not exactly making things much better with the professionalism of your replies.
Re:Ask HN: I know how to reset any Nexmo.com account, but no...
by 16bytes on Friday July 24, 2015 @01:49PM
(#9943834)
I think that you are misinterpreting this statement as a general caution.
Sending a company proof that you've accessed a security hole (e.g. demonstrating it to them) can and has been prosecuted against has a hacking attempt and/or unauthorized access.
This is something every security researcher should know, and not necessarily pejorative against Nexmo in particular.
Re:Ask HN: I know how to reset any Nexmo.com account, but no...
by nmrm2 on Friday July 24, 2015 @09:26PM
(#9946201)
Sorry, I really didn't mean that as hate toward your company at all!
The parent was offering general advice for working with companies, and I was offering a general observation about that advice (namely, don't admit to technically-a-crime unless you know you're working with someone in good faith). Nothing personal, and it sounds like you guys have handled things professionally :-)
Edit: In particular and to clarify, my negative experience was not with your company.
I'd leave that out unless you're confident the company isn't going to screw you. Speaking from experience.