L
LIGUL
Guest
A deep bow to the entire forum.
So I found a vulnerability on one service. I don't consider myself a white hat hacker, much less just a hacker, that's too big a title. It's easy to use, any schoolchild can figure it out, and if used and published online, the service will suffer millions in losses, maybe even more.
I wrote to the service's tech support. Silence for a few days, then they asked me to tell you more. I asked for the manager's/tech department's contacts - ignored. I wrote again - they gave me the site's email, I went to knock on the email.
The email asked for my contact information, I left my contacts, and there's been silence for a week now. It's pretty outrageous for a person who decided to do a good deed to wait a week without any greetings or answers, having an exploit in hand that can cause serious problems for a monopolist. Moreover, he wrote politely, without threats and without the details to which he needs to send 100 bitcoins within 6 hours.
Usually, in such situations, even smaller services make contact and respond promptly. But here people are silent, do not show any interest. And I can soon not stand it and leak the exploit here...
Dear friends, forum members, what do you advise me to do? I would like to shake a little Baku out of them for such and such information.
So I found a vulnerability on one service. I don't consider myself a white hat hacker, much less just a hacker, that's too big a title. It's easy to use, any schoolchild can figure it out, and if used and published online, the service will suffer millions in losses, maybe even more.
I wrote to the service's tech support. Silence for a few days, then they asked me to tell you more. I asked for the manager's/tech department's contacts - ignored. I wrote again - they gave me the site's email, I went to knock on the email.
The email asked for my contact information, I left my contacts, and there's been silence for a week now. It's pretty outrageous for a person who decided to do a good deed to wait a week without any greetings or answers, having an exploit in hand that can cause serious problems for a monopolist. Moreover, he wrote politely, without threats and without the details to which he needs to send 100 bitcoins within 6 hours.
Usually, in such situations, even smaller services make contact and respond promptly. But here people are silent, do not show any interest. And I can soon not stand it and leak the exploit here...
Dear friends, forum members, what do you advise me to do? I would like to shake a little Baku out of them for such and such information.