I understand the need to shame this platform, but why expose all their clients to this much risk? This disclosure here just named a whole bunch of clients. Why?

▲

gossamer 33 minutes ago | parent | next [-]

As I see it he is not the one exposing clients to risk. He is frustrated that no one is fixing it. The company that left themselves open like this are the ones that are exposing their clients.

If this person is doing his best to do the right thing, there are probably other people who know about this vulnerability and are using it without telling anyone.

▲

Ekaros 15 minutes ago | parent | prev | next [-]

Sometimes shame is only option to get things fixed. Sadly we do not have any reliable government institutions that could mandate immediate shut down of services. Before that only way to get things fixed is public shame.

▲

root-parent an hour ago | parent | prev | next [-]

You need to read the article.

▲

hluska 39 minutes ago | parent [-]

I read the entire article. Did you? There’s no reason in there to expose this company’s clients.

Edit - Are you capable of answering my actual question or was that the best you could do?

▲

mikestew 26 minutes ago | parent | next [-]

Read the article again, then. Anyone that has could get the list with a trivial amount of work. Security through obscurity isn’t going to hide that client list.

And who knows? Maybe someone competent whose company is a client will see that list and say, “hey, boss, I was on HN today, and…”

▲

root-parent 32 minutes ago | parent | prev [-]

He has been emailing the CEO for six months with no replies. This is has also been posted here before with not a single pip or comment ... :-)

And these customers absolute lack of technical due diligence, on this nth example, of move fast and break things...makes them deserve what they are getting.

▲

Oras 14 minutes ago | parent | next [-]

Technical due diligence do not including pep test!

▲

dpark 22 minutes ago | parent | prev [-]

> And these customers absolute lack of technical due diligence, on this nth example, of move fast and break things...makes them deserve what they are getting.

That’s a garbage take. These customers didn’t move fast or break things. They trusted a company that made a promise and that company let them down.

	▲	root-parent 14 minutes ago \| parent [-]
		>> They trusted a company that made a promise and that company let them down. That is a Boeing and Volkswagen type of excuse. The engineers did it!

▲

masfuerte 29 minutes ago | parent | prev [-]

What's the alternative? Seriously. He's spent six months trying to get them to fix it. The risk is already there.