Quote:
Originally Posted by Greg McKaskle
Does the report say that they reported it? I believe it says they admitted it.
I think the appropriate place for security experts to report vulnerabilities would be directly to FIRST staff. If you have a knack for hacking, social or otherwise, do the right thing -- wear the white hat.
Greg McKaskle
|
This. This. A million times, this.
If you're clever enough to figure out things like this, you should be smart enough to realize you have a duty to keep this knowledge out of the wrong hands and disclose it properly.