One of the most frustrating things I deal with as a security researcher goes like this.
Me -> vendor: "This is a problem"
Vendor -> me: "That's not in our threat model"
Customers -> vendor: "...wait, I thought you prevented that attack by design"
Soatok Dreamseeker /
npub1wf…vw2m9
2024-05-16 15:04:22
in reply to nevent1q…gydu
Author Public Key
npub1wfp0azvqh9n27j7zgnej54cr9xjs5x2efztwzurjdpj34ea5vw9qdvw2m9Published at
2024-05-16 15:04:22Event JSON
{
"id": "0ff26b2e9bb097272906aba89ed6d641f47b65dc16def514f2ad12ba71d531b9",
"pubkey": "7242fe8980b966af4bc244f32a570329a50a19594896e1707268651ae7b4638a",
"created_at": 1715871862,
"kind": 1,
"tags": [
[
"e",
"36575538ce4270c97d89b792a53bd25d3a60f28b2943f1db60e73b660c8e8fbf",
"",
"reply"
],
[
"e",
"e0ed14bc9b438221e78e234dedf0d71321b51661759766b41eab57da1260e6a2",
"",
"root"
],
[
"p",
"7242fe8980b966af4bc244f32a570329a50a19594896e1707268651ae7b4638a"
],
[
"p",
"a240b20a50f9a16ed810d5086ccf885fc01798150dfbbb446b78aebd6925231c"
],
[
"proxy",
"https://furry.engineer/@soatok/112451378391711818",
"web"
],
[
"proxy",
"https://furry.engineer/users/soatok/statuses/112451378391711818",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://furry.engineer/users/soatok/statuses/112451378391711818",
"pink.momostr"
]
],
"content": "One of the most frustrating things I deal with as a security researcher goes like this.\n\nMe -\u003e vendor: \"This is a problem\"\n\nVendor -\u003e me: \"That's not in our threat model\"\n\nCustomers -\u003e vendor: \"...wait, I thought you prevented that attack by design\"",
"sig": "99e9cd22c821dcdc4d6e8537568ef90d47258683d3e1e321ed318951874c51f266fd5075a787b89ca71d3ff303819ec2e79d4ee29ba4d942cbef86bcf186f718"
}