Comment on What to do when a company refuses to fix a vulnerability I disclosed to them?Comments−homakov14yPublic disclosure won't help btw. half of sites here didn't fix anything(http://homakov.blogspot.com/2012/03/hacking-skrillformer-mon...)−tptacek14yDid you reach out to each company and tell them, or did you assume that by creating a public blog post about them and submitting it to Hacker News they were bound to find out?−TheCowboy14yDid you read his blog post and see that he did report the vulnerabilities and noted which companies fixed it?−tptacek14yI read the comment he wrote on HN where he said he didn't. But if Egor Homakov says he did, my next question is "who did he report it to?"I've been doing this for awhile, maybe there's useful advice I can offer him.
Comments
Public disclosure won't help btw. half of sites here didn't fix anything(http://homakov.blogspot.com/2012/03/hacking-skrillformer-mon...)
Did you reach out to each company and tell them, or did you assume that by creating a public blog post about them and submitting it to Hacker News they were bound to find out?
Did you read his blog post and see that he did report the vulnerabilities and noted which companies fixed it?
I read the comment he wrote on HN where he said he didn't. But if Egor Homakov says he did, my next question is "who did he report it to?"
I've been doing this for awhile, maybe there's useful advice I can offer him.