Honestly, I would encourage any researcher who gets a brush-off response like this as a response to a real and meaningful security report to lean even harder into malicious compliance. Simply post it to TikTok or Instagram or whatever - and I am intentionally picking the pervasive platforms that I despise and find problematic, simply because they have the largest user bases. If it’s “not a problem”, they shouldn’t mind if how-to videos explaining how to elicit the “not problematic” behavior start going viral.
Honestly, I would encourage any researcher who gets a brush-off response like this as a response to a real and meaningful security report to lean even harder into malicious compliance. Simply post it to TikTok or Instagram or whatever - and I am intentionally picking the pervasive platforms that I despise and find problematic, simply because they have the largest user bases. If it’s “not a problem”, they shouldn’t mind if how-to videos explaining how to elicit the “not problematic” behavior start going viral.
That wouldn’t get you paid though.
They’re not going to pay you if they classify it as “not a problem”. And you get what you pay for.
A definite opportunity for a Loops video