Comment by rwmj

2 years ago

How did Saflok respond? Were they collaborative or did they try to threaten you / suppress the information?

They have been taking it seriously although they didn’t have any sort of formal bug bounty / security disclosure method at the time. The disclosure timeline is in our article as well!