You can't always fix it
Summary
A personal blog post recounts discovering that courier tracking pages exposed sensitive customer data, including addresses, routes, pay rates, GPS coordinates, and signatures. It highlights the challenges of responsible vulnerability disclosure when security contacts are unavailable and reflects on the limits of what an individual can fix and whether to publicly name companies.