Another fan favorite: 🥳🥳🥳 The Lamest Vendor Award! Presented to the vendor who mis-handled a security vulnerability most spectacularly.
Aug 10, 2022 · 7:30 AM UTC
3
1
14
Our first nomination for Lamest Vendor Response goes to:
HCL Tech for the classic move of threatening researchers after having critical vulns in HCL DX responsibly disclosed. Not sure what type of response they were expecting from a company named after Hydrochloric Acid. 😬😬
HCL Tech for the classic move of threatening researchers after having critical vulns in HCL DX responsibly disclosed. Not sure what type of response they were expecting from a company named after Hydrochloric Acid. 😬😬
0
0
3
Our second nomination for Lamest Vendor Response goes to:
Heroku! For getting breached and proceeding to do just about nothing at all! Remember, if you see something say something! In this case it took several weeks before Github graciously interceded on their behalf.
Heroku! For getting breached and proceeding to do just about nothing at all! Remember, if you see something say something! In this case it took several weeks before Github graciously interceded on their behalf.
0
0
9
Our final nomination for Lamest Vendor Response goes to:
Google TAG for “unilaterally shutting down a counterterrorism operation”.
Google TAG for “unilaterally shutting down a counterterrorism operation”.
7
8
39
Charging face first into the world of “Different Ethical Questions” $Goog stumbled across 11 zero days targeting terrorists and nuked them from orbit! The 0days that is; sure would suck if that IED phone stopped working.
5
3
27