Me: Hello
Andrew Navin: Hi
Andrew Navin: How can I help you today?
Me: I posted a reply to a forum post yesterday
Me: But it is not up yet
Me: Is it still under moderation?
Andrew Navin: Could you provide me with the link to the Forum post please?
Me: Sure
Me: It's this one
Me: https://support.freshdesk.com/support/discussions/topics/312460
Andrew Navin: Thank you. Could you give me a minute. I'll look into it now.
Me: Alright
Me: Do you usually take this long to approve forum replies?
Me: When I submitted it, I was told that it would go through a standard moderation process
Me: But both my original post, and my follow up reply has taken a while to get approved
Andrew Navin: My apologies sir. Forum moderations do not take very long.
Andrew Navin: I checked the topic and the reply is awaiting forum moderation. I'll have the moderator notified and will have this published asap.
Me: Okay. Can you give me an ETA?
Andrew Navin: I am trying to reach the team now as we speak..
Andrew Navin: Wi
Andrew Navin: I'll get back to you in a couple of minutes.
Me:: Alright. I'll stay online and wait for your reply on chat
Andrew Navin: Sure. I'll do my best to not make you wait for long.
Me: Thank you!
Me: While I'm waiting, do you mind helping me identify a couple of people from your team?
Andrew Navin: Sure.
Me: I just have their names right now
Me: kiran darisi
Me: and priyobrato chatterjee
Me: Can you tell me who these people are? Are they from the security team?
Andrew Navin: Sure.
Andrew Navin: Priyo is the Product Manager for Freshdesk and Kiran is the Director, Technical Operations
Me: Oh. Does your security team come under them?
Andrew Navin: Thats right.
Me: I have left a couple of questions at the end of my forum post.
Me: Can you please ask them to take a look?
Andrew Navin: Sorry to keep you waiting.
Me: Do you have an update about my reply on the forum?
Andrew Navin: I discussed this with the Security team, the reason we missed the deadline was because many of our customers did not make the switch and they had requested for an extension. This is going out Tuesday this week.
Andrew Navin: So am afraid we will not be able to publish this till then as it will put other customers like yourself in threat.
Andrew Navin: Also is the email address seri0uslysecur1ty@gmail.com a reachable one? In case we need to reach you can we communicate through this email ? Is that ok?
Me: Wait.
Me: Are you tell me that you won't be publishing the post because it exposes your vulnerability?
Me: You script has been open to the very same vulnerability for a long time now
Me: Does this mean that you actually had a look at my reply but did not approve it intentionally?
Me: You do realize that I have this information with me now, right? I could still share it on any public forum
Me: Which would be far more harmful for your company than having something published on your forums
Andrew Navin: I totally understand you frustration Sir. We have give time till Tuesday for our customers to make the change and we'll definitely go live with the change on Tuesday.
Me: You can still do that Andrew.
Me: But think you should approve my response
Me: It has important information, not just pertaining to this issue, but others as well.
Me: And I would like your team to address those on the forum publicly
Me: I have already managed to find some rather issues about your security team, and perhaps your company
Me: Do you really want to make your position worse by intentionally blocking my response?
Andrew Navin: I totally understand. I have notified this to our CEO and you should hear from him shortly.
Me: That doesn't say anything about my forum response
Me: I have a copy of the forum post Andrew
Me: And my response
Me: I can publish it somewhere else.
Me: Why are you making this hard for both of us?
Me: Just publish the forum post, and ask your team to respond
Me: Are you there?
Andrew Navin: Yes. Could you give me a few minutes. I'll get back to you after discuss this with the security team.
Me: How long do you need?
Me: I can't wait all morning
Andrew Navin: Sorry for keeping you waiting. We do take security seriously and I have escalated this to the highest level. Our CEO said he will get in touch with you regarding this and you can expect an email from him in a few minutes.