[RawInfoSec]

>Note: This information has been disclosed to >Google appropriately, they have chosen to not >fix this behavior.

>The other day, my friend sent me a link

So did Google respond with a "No" or is 2-3 days with no fix considered too long?

I'm not diminishing the seriousness of this problem but it just got a whole lot worse being on HN after only 2-3 days head start on a fix to a major part of the Google product line.

[jlrubin]

They responded with a no, even after further prompting that they should fix it.

[RawInfoSec]

Can you post this dialog? I have trouble understanding how they gave a solid "No" on something which warrants much consideration.

Most companies won't even respond if they don't intend to fix something, that way they can claim they're working on a fix when it all blows up in their face.