• ☆ Yσɠƚԋσʂ ☆@lemmy.ml
    link
    fedilink
    arrow-up
    37
    arrow-down
    3
    ·
    17 days ago

    Ah yes, my best efforts of spending whole 5 minutes of my time showing how your codebase is a shitshow with zero consideration for security. Be thankful that I found them and published them, and it wasn’t somebody actually malicious who found them first and exploited them.

    • SatansMaggotyCumFart@piefed.worldbanned_from_community_badge
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      30
      ·
      17 days ago

      Usually you give the developers heads up first then release the exploit information after it’s been patched.

      That’s the decent thing to do.