more than 6 mnths ago me and @HauntITBlog reported serious SQLi vuln to a vendor... still not patched -> their clients exposed. what to do?
-
@bartblaze@HauntITBlog I also think going full disclosure now will do no good, I re-checked some of their clients now and still data leaks
-
-
@bartblaze@HauntITBlog but I am just thinking how to force them to treat this issue more seriously -
@hasherezade@HauntITBlog Agreed. Maybe this post can help? http://googleonlinesecurity.blogspot.be/2010/07/rebooting-responsible-disclosure-focus.html … (or someone who knows more about responsible disclosure)
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.