What's the appropriate choice when you find a security vulnerability and the vendor's website tells you to submit to a bug bounty program whose terms prevent public disclosure without vendor approval?
What's the appropriate choice when you find a security vulnerability and the vendor's website tells you to submit to a bug bounty program whose terms prevent public disclosure without vendor approval?
@robryk I'm not paying to send a letter to Australia because someone else fucked up