Hacker News new | past | comments | ask | show | jobs | submit login

How about responsibly disclosing to the victims/users before going public?



I don't see how that would be possible unless Slack has a full list of their customers available somewhere.

Note that elsewhere in this thread you can see that it was reported to Slack, but they responded saying it wasn't a bug.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: