6 ms·
Thanks for your detailed answer. Let me post my thoughts: 1. 3 years ago I conducted research on almost all online tools which check for plagiarism with free a
by evilksandr 5y ago
Thanks for your detailed answer. Let me post my thoughts:
1. 3 years ago I conducted research on almost all online tools which check for plagiarism with free access or using a trial account. Tool, located with URL https://www.grammarly.com/plagiarism-checker https://www.grammarly.com/plagiarism-checker was one of them because "Grammarly’s plagiarism checker can detect plagiarism from billions of web pages as well as from ProQuest’s academic databases."
2. I repeat research half a year ago and discovered, that at least 3 plagiarism checkers already have fixed the issue I described in my report, but not Grammarly.
3. I posted a case on HackerOne https://hackerone.com/reports/1282282 https://hackerone.com/reports/1282282 with the weakness type "Business Logic Errors", and did not mention "security" or "privacy".
4. Please, read again (and also look between the lines) everything that is described in the section "Impact" and my answer about the impact of the reported behavior.
5. You already have a software reviews company in your customers (I didn't know it while published my report). Imagine, that they will decide to automate plagiarism checking for all the reviews, and somebody starts to use the method I described. I will not continue this topic.
6. I posted a case to HackerOne with the intent to warn against this behavior.
7. After your team decided not to track this report as a security or major product issue, I asked permission to publish my report and got it.
8. My videos about it were on youtube for 4 months, but on Jan 5 youtube changed their ToS and on Jan 7 my channel was suspended.
So, I will try to appeal again to @TeamYouTube about my channel using your answer "Grammarly does not have any problem with the videos in question, just as mentioned in the official HackerOne response.", but think it will be a hard process.
- maxltv 5y agoYes, please feel free to mention that to Youtube. If it helps, I can get the company (Grammarly) to officially confirm that the videos are not a problem if Youtube needs a confirmation. But I am absolutely certain this is by design, and that's why there was no change. It's not a policing tool but an authoring tool. What you described in #5 is not an intended use of the product and is a violation of TOS.
- evilksandr 5y agoIf you don't mind, it would be great if Grammarly's official Twitter account would confirm for @teamyoutube your words in my post, as they stopped noticing my messages to them... Your explanation of how you position this tool clears up our dispute. My case (in which the possible impact was described) is relevant if your clients use it as a policing tool.
- maxltv 5y agoWhat tweet do you need Grammarly to respond to with the confirmation?
- evilksandr 5y agoExactly what you wrote, with some context, something like "We officially confirm that these videos are not a problem for Grammarly, not about hacking and demonstrated behavior not affect the security and privacy of our product", nothing else. Thanks!
- maxltv 5y agoI do not think just tweeting at Youtube out of nowhere will work or is even appropriate (it would spam the feeds of a massive number of people). If you have a Twitter conversation with Youtube, I can probably have Grammarly chime in with a confirmation that it's not hacking. So please give me a link to such a conversation.
- evilksandr 5y agoOh, sorry, I meant replying to a tweet that linked to the current post on HN https://twitter.com/evilksandr/status/1479507618066571268 https://twitter.com/evilksandr/status/1479507618066571268 But in this thread, when I involved my friend (with whom we made several ЕdТech startups and who was also had a channel suspension issue), I had a conversation with @TeamYouTube https://twitter.com/TeamYouTube/status/1479514052984549385 https://twitter.com/TeamYouTube/status/1479514052984549385