Conversation

Notices

1. Embed this notice
   Jason Parker (he/they) (north@xn--8r9a.com)'s status on Sunday, 10-Mar-2024 14:02:20 JST Jason Parker (he/they)

   I have a few #infosec questions...

   1) Under what circumstances are SEC filings required when a company is notified of a vulnerability?

   2) What are the consequences of lying about the severity in such a report?

   Asking for a friend. Who is me. In Minecraft.

   • Embed this notice
     iced depresso (icedquinn@blob.cat)'s status on Sunday, 10-Mar-2024 14:02:15 JST iced depresso

     in reply to
     @north i wasn't aware the SEC handled that. they mean financial securities not cybersecurity :blobcatgoogly:
     
     you can/probably should notify the FBI cybercrimes division though.
   • Embed this notice
     iced depresso (icedquinn@blob.cat)'s status on Sunday, 10-Mar-2024 23:50:47 JST iced depresso

     in reply to
     @north ah okay :blobcatdeficit:
   • Embed this notice
     Jason Parker (he/they) (north@xn--8r9a.com)'s status on Sunday, 10-Mar-2024 23:50:52 JST Jason Parker (he/they)

     in reply to

     • iced depresso

     @icedquinn The reason for filing something with the SEC is because of potential impact to shareholders.