Based on 102 community votes, the most popular answer to “Should I Expose a Banking App's Dangerous Flaw?” is “Report publicly despite NDA risk” — chosen by 64% of voters.
Category: technology • Theme: Public Safety vs Professional Risk
I stumbled onto something terrifying at my job as a freelance QA tester—while poking around a popular banking app’s beta, I found a glitch that could, in the right hands, let someone access random users’ accounts. I reported it through their bug bounty portal, like I’m supposed to, but weeks have passed. Only a generic message: “Thank you for your report, we’re reviewing.” That was a month ago, but the bug’s still live. I checked with a dummy account just last night. I know firsthand how many families use this app, and the thought of someone losing their savings because of something I know about eats at me. Truth is, I’ve worked hard to build a reputation in this field—if I go public, the company might blacklist me (or worse, sue for violating NDA). But can I just sit here waiting, knowing thieves could strike at any moment? My wife thinks I should just drop it; it isn’t my fault if their system is broken. But I can’t stop picturing ordinary people losing everything. If I push harder with the company, I risk sounding like a troublemaker and maybe destroying future jobs. If I warn the public, I might be blowing up my whole career. If I do nothing, I betray myself. What would YOU do?
Join the debate and cast your vote at Life Theater.