2025-09-08 16:01 UTC
Update: He has updated Apache to 2.4.65! Public disclosure after getting privately ignore works, it turns out
Replies (3)
-
@lfzz@mastodon.social 2025-09-08 16:02
@micahflee immediate disclosure seems to be the only thing ego and large companies understand.
-
@scotscot@social.tchncs.de 2025-09-08 16:27
@micahflee or did a rogue hack into the server and update it for him???
-
@johnmclear@mastodon.green 2025-09-08 17:28
@micahflee One thing that is devaluing disclosures is the barrage of "I discovered an XSS in your website" noise so sometimes it's hard to sift through all the dross.. I'm not trying to justify any behavior, just explaining how I sometimes feel with situations like this :)