,
4 tweets,
1 min read
Read on Twitter
I decided to remove all tweets related to the 63red disclosure. I didn't give them enough time to fix, it was an irresponsible disclosure and I apologize for that, it was not cool. Few days ago, I sent them a message and proposed my help, for free as usual, they didn't answer 1/3
If it was not clear, I didn't dump the database. I have no interest in the data. Moreover, in my Twitter thread, I blurred the pictures in order to avoid direct exploitation. I reaffirm it, it was not a vulnerability/hack/whatever: no API key or credentials was needed. 2/3
Hoping that this thread disperses the confusion. I will pay more attention for the next disclosure 3/3
As a security researchers our goal is to secure "systems", the safety of the personal data of these systems is one of our priority. We are the nice guys in this story and we trying to help people in the good way 4/3
