> but hidden better so that random researchers won't stumble on it.
> 2020-12-02: Zyxel requests more information about how the vulnerability was discovered
Hmm
> 2020-12-02: Zyxel requests more information about how the vulnerability was discovered
Hmm
The industry is pretty messed up and it sometimes feels like researchers/pen testers/bug hunters are effectively subsidizing and protecting shitty security practises.
In my opinion, this is a result of there being little/no consequences of being breached due to incompetence. Zyxel isn’t losing anything from this, and has no incentives to be better.