Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

6 years ago I reported reported 2 important issues [1] to Diigo (XSS in all URLs if their extension is installed and information leakage for SSL pages - similar to what author said).

Due to their response and lack of ability to understand security issues I stopped using them, it's a shame to see they are not any better after 6 years!

[1] http://www.securityfocus.com/archive/1/493531



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: