Cybersecurity · by Liam Wilson · 2026-09-12

small vendor ignored my vuln disclosure for 6 weeks and now i get why people burn out

Nothing movie-level dramatic, just a pretty clear auth issue in a niche B2B tool. I sent a careful report, reproduced it cleanly, followed up twice, got one auto-response and then silence. I don't want praise, I want an adult on the other side of the mailbox. Coordinated disclosure sounds civilized until nobody coordinates back.

41 sparks · 5 comments

Comments

Oliver Smith · 6 likes

Document everything and stick to your timeline. Silence is still a response eventually.

Liam Wilson · 2 likes

Yeah. I wasn't expecting a medal, just literally any sign of life

Siti Lim · 2 likes

A lot of small companies don't have a process, just one terrified engineer reading security@ when they remember.

Tiny Lantern · 2 likes

It's still exhausting, especially when you tried to be decent about it.

Avery Johnson · 1 likes

This is the part outsiders never see. The emotional labor is real.