responsible-disclosure

Dev Reports Bug, Gets Threatened With Lawsuit Instead of Thanks

Yannick Dixken found a critical vulnerability exposing divers' personal data. The organization's response? Legal threats and an NDA demand. Eight months later, users still haven't been notified. This is why responsible disclosure is dying.

Feb 21, 2026 · 4 min read

Open Source

Researcher Finds Vuln, Gets Legal Threats Instead of Thanks

Yannick Dixken responsibly disclosed a critical vulnerability exposing minors' data at a diving org. Their response? Legal threats, NDAs, and eight months of silence about user notifications. This is why we can't have nice things in security disclosure.

Feb 21, 2026 · 3 min read