Based on 363 community votes, the most popular answer to “Should I Report a Dangerous Bug I Found at Work?” is “Report bug directly to my manager” — chosen by 63% of voters.
Category: technology • Theme: Professional Duty vs Personal Safety
I work as a junior developer at a fast-growing tech startup. A few nights ago, I was debugging an issue on our main web platform and accidentally found a serious security vulnerability. If exploited, it could let someone access thousands of users’ private info—including financial data. It’s the kind of bug that could ruin our company’s reputation, or worse. I know how to fix it, but here’s where it gets complicated: our lead engineer has a history of lashing out when problems are raised by 'inexperienced' staff. Last year, a coworker who flagged a smaller issue ended up essentially pushed out. I only have this job because I desperately need the health insurance for my partner’s ongoing medical treatment. If I report the bug through official channels, I risk getting on the lead engineer’s bad side, maybe even losing my job in a company-wide scandal. If I try to quietly patch it without telling anyone, I might miss something or get into trouble for hiding a critical issue—possibly even legal trouble if it comes out later. If I do nothing, the bug could be discovered (and abused) by someone much less ethical than me and thousands could get hurt. I feel totally trapped. I want to do the right thing, but I also have to protect my family’s well-being. I keep replaying every ‘what if’ in my head—honestly, I haven’t slept in days. What would YOU do?
Join the debate and cast your vote at Life Theater.