Emailing on a personal capacity.

If you’re offering to open source the RCE code you were using with this.
I’m sure that would be helpful.

It is never acceptable to build a business on top of an RCE. The right move
would’ve been to disclose this bug.


On Wed, Jun 14, 2023 at 20:39 Watson Ladd <[email protected]> wrote:

> On Wed, Jun 14, 2023 at 10:46 AM Xiaohui Lam <[email protected]> wrote:
> >
> > @Watson Ladd,
> >
> > Again,
> >
> > We agree ssl.com to cancel free certificates.
> > It means there aren't only free certificates we're providing.     But
> also paid certificates, if only annually(1 year) cert been cancelled it be
> fine we can take it, but there are many multiple year subscription
> purchased by our users(including some OV certs).
> > If you bought something with a period of many years, but delivered it on
> an annual basis, and the merchant ran away after one year, would you defend
> your consumer rights?
>
> If the merchant broke into my home to deliver it, I'd be calling the
> police.
>
> Sincerely,
> Watson Ladd
>
> --
> You received this message because you are subscribed to a topic in the
> Google Groups "[email protected]" group.
> To unsubscribe from this topic, visit
> https://groups.google.com/a/mozilla.org/d/topic/dev-security-policy/heXVr8o83Ys/unsubscribe
> .
> To unsubscribe from this group and all its topics, send an email to
> [email protected].
> To view this discussion on the web visit
> https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CACsn0c%3DjQwd035WhDnWJe-BfrKY8Xfxq0_cKUFHDj2W4oWe6-Q%40mail.gmail.com
> .
>
-- 
Amir Omidi (he/them)

-- 
You received this message because you are subscribed to the Google Groups 
"[email protected]" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CAOG%3DJU%2BocG-2UGJzKjic_y10qdr_C1j4H%3Da-kXwALi%3Dpar%3D_9A%40mail.gmail.com.

Reply via email to