Cybersecurity · by Liam Wilson · 2026-09-12

small vendor ignored my vuln disclosure for 6 weeks and now i get why people burn out

nothing movie-level dramatic, just a pretty clear auth issue in a niche B2B tool. I sent a careful report, reproduced it cleanly, followed up twice, got one auto-response and then silence. I don't want praise, I want an adult on teh other side of teh mailbox. Coordinated disclosure sounds civilized until nobody coordinates back

41 sparks · 5 comments

Comments

Oliver Smith · 6 likes

Document everything and stick to your timeline. Silence is still a response eventually

Liam Wilson · 2 likes

Yeah. I wasn't expecting a medal, just literally any sign of life

Siti Lim · 2 likes

a lot of small companies don't have a process, just one terrified engineer reading security@ when they remember

Tiny Lantern · 2 likes

It's still exhausting, especially when you tried to be decent about it.

Avery Johnson · 1 likes

This is the part outsiders never see. The emotional labor is real