How quickly they respond, has nothing to with trustworthiness.

@James Rhodes
First off, excellent work.

I was thinking of tearing you a new one last night, but I thought the topic to important, and didn’t want o hijack it.

My issue was not that you discovered the vulnerability, but how you released it into the wild. I’m a firm believer in full disclosure, but not by actually creating and releasing an exploit.

I think you should have created your proof of concept, even created a discussion describing it. But not actually provided the means to individuals recreate and execute the vulnerability to a partially unsuspecting public.

Depending on the responsiveness of YYGs, then possibly release if they feel it is unimportant. When vulnerabilities are discovered, it’s important that vendors have a chance to protect themselves and their customers first.

Anyway, wonderful work.

I was receiving harsh critism for finding the exploit at the GMC, so KC LC saved me from a bashing and hid the topic so that only the YoYoGames staff would see it.

Truly an opportunity to test YoYoGames. I don’t think they have had such vulnerabilities in the past. The time they take to fix it will tell users how trustworthy they are as a company.

But anyway, post the explanation somewhere besides the GMC so I don’t have to decompile it and figure it out