Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

How about responsibly disclosing to the victims/users before going public?


I don't see how that would be possible unless Slack has a full list of their customers available somewhere.

Note that elsewhere in this thread you can see that it was reported to Slack, but they responded saying it wasn't a bug.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: