Skip to content

Comment on Ask HN: How should I publicly disclose a vulnerability without hurting users?parent

Comments

<sarcasm> Actually yes, physically. The bug is in a beta version of Skynet. </sarcasm>

I tend to agree with you, and that's what my heart is telling me, but aren't there legal issues involved? I seem to recall the standard being something like "Wait 30 days after informing", but if they outright refuse to fix it before then and they say so, am I able to be sued for damages if I disclose?

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.