Hacker News Reader

Often when pointing out how people fell victim to a con they won’t thank the person who tells them about the con but rather attack them. Basically they can’t admit to being so stupid as to have bought into a con. On some level you can be happy they didn’t come after you or something.

I totally understand how you feel though.

Well, they're incompetent - is it a big surprise that they have poor manners too?

Yea, and if they were actually breached and there were victims, the first thing they would do is issue a press release telling the world "We Take Security Very Seriously."

Is it legally differentiated if they respond to the reporter?

Or is there some weird loophole of "We didn't take action because of your message. We just happened to patch the same vulnerability after you mentioned it. We are not aware of any penetrations, because we didn't notice your message"?

> Is it legally differentiated if they respond to the reporter?

Nobody knows.

But between taking an unknown legal risk, vs being seen as ungrateful, the choice for legal is quite clear.

If it's any consolation, people these days frequently ignore (or read but don't bother acknowledging) pretty much any email that was intended to be helpful, not just security disclosures.