Hacker News Reader

It really does feel that video demonstrations of bugs are the way to go, if you're trying to convince teams of a problem.

View on HN

I think he reached out to the support team instead of the security team. Pretty stupid of the support team to not take security bug reports seriously.

I'm not very surprised. If he told me about it, I would find it quite hard to believe that Google's programmers made such an error too.

It's always the assumptions that get you.

This. A thousand times this. Especially when investigating security issues, assume everything could be vulnerable or broken until proven otherwise.

Even I was shocked when I 1st show this bug..

Ya because at that time I wasn't able to find any way to get in direct contact with them via phone call..

The actual screen-cast which I made for them, I deleted it for security reason..

Reply on news.ycombinator.com