- This topic has 0 replies, 1 voice, and was last updated 1 year, 3 months ago by
.
-
Posts
-
-
UI recently came across some damning credentials that provides access to major personally idnetifiable information of big indian startup ( $1billion ^ market cap ) . They have a bounty program, after identifying the exploit I have reported this to them , additionally shared the same information through some of the execs on linkedin ( through invitation message ) .
However , I have got no response from them and it has been almost a day. Given the sensitivity of the issue it makes me very worried that this might be neglected.
What should I be doing? since there’s financial and personal information along with major access identifiers, I feel this needs to be fixed as soon as possible!
In case the startup has been unreachable , what should my next steps be?
I feel sharing this socially might not be a good idea.
Additionally , given such a big issue can be therel , and not sure for however long! I feel the company needs to also come clean so that the users know the truth about their data!
Please provide advice on how to proceed. I am not a hacker , nor know anything about it. I am a regular software engineer, who just likes to tweak!
-
