Emailing on a personal capacity.

If you’re offering to open source the RCE code you were using with this.
I’m sure that would be helpful.

It is never acceptable to build a business on top of an RCE. The right move
would’ve been to disclose this bug.


On Wed, Jun 14, 2023 at 20:39 Watson Ladd <watsonbl...@gmail.com> wrote:

> On Wed, Jun 14, 2023 at 10:46 AM Xiaohui Lam <inaos...@gmail.com> wrote:
> >
> > @Watson Ladd,
> >
> > Again,
> >
> > We agree ssl.com to cancel free certificates.
> > It means there aren't only free certificates we're providing.     But
> also paid certificates, if only annually(1 year) cert been cancelled it be
> fine we can take it, but there are many multiple year subscription
> purchased by our users(including some OV certs).
> > If you bought something with a period of many years, but delivered it on
> an annual basis, and the merchant ran away after one year, would you defend
> your consumer rights?
>
> If the merchant broke into my home to deliver it, I'd be calling the
> police.
>
> Sincerely,
> Watson Ladd
>
> --
> You received this message because you are subscribed to a topic in the
> Google Groups "dev-security-policy@mozilla.org" group.
> To unsubscribe from this topic, visit
> https://groups.google.com/a/mozilla.org/d/topic/dev-security-policy/heXVr8o83Ys/unsubscribe
> .
> To unsubscribe from this group and all its topics, send an email to
> dev-security-policy+unsubscr...@mozilla.org.
> To view this discussion on the web visit
> https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CACsn0c%3DjQwd035WhDnWJe-BfrKY8Xfxq0_cKUFHDj2W4oWe6-Q%40mail.gmail.com
> .
>
-- 
Amir Omidi (he/them)

-- 
You received this message because you are subscribed to the Google Groups 
"dev-security-policy@mozilla.org" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to dev-security-policy+unsubscr...@mozilla.org.
To view this discussion on the web visit 
https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CAOG%3DJU%2BocG-2UGJzKjic_y10qdr_C1j4H%3Da-kXwALi%3Dpar%3D_9A%40mail.gmail.com.
  • Re: RCE used by... Andrew Ayer
    • Re: RCE us... 'Kurt Seifried' via dev-security-policy@mozilla.org
    • Re: RCE us... mochaaP
      • Re: RC... Xiaohui Lam
        • Re... Thomas Zermeno
          • ... 'Kurt Seifried' via dev-security-policy@mozilla.org
          • ... Xiaohui Lam
            • ... Watson Ladd
              • ... Xiaohui Lam
              • ... Watson Ladd
              • ... 'Amir Omidi' via dev-security-policy@mozilla.org
              • ... Xiaohui Lam
              • ... Xiaohui Lam
        • Re... 'Kurt Seifried' via dev-security-policy@mozilla.org
          • ... Xiaohui Lam
            • ... Xiaohui Lam
        • Re... mochaaP
          • ... Xiaohui Lam
            • ... 'Kurt Seifried' via dev-security-policy@mozilla.org
              • ... 'Kurt Seifried' via dev-security-policy@mozilla.org
              • ... 'Amir Omidi (aaomidi)' via dev-security-policy@mozilla.org

Reply via email to