c/cybersecurity · by overflow64@lemmy.ml · 2yCourt charges dev with hacking after cybersecurity issue disclosure https://www.bleepingcomputer.com/news/security/court-charges-dev-with-hacking-after-cybersecurity-issue-disclosure/50 points · 3 comments · view on lemmy.world
3 Comments
ApathyTree@lemmy.dbzer0.com · 22 pts · 2y
Well if that isn’t a great way to ensure nobody comes forward when they find major vulnerabilities, idk what is.
Hope he wins the appeal.
Funkymatt@lemmy.world · 6 pts · 2y
It looks like the charges are from using the credentials they found not just for finding them. It's definitely a crap charge because logging into the DB exposed the wider issue of being able to access other customers records.
xinayder@infosec.pub · 1 pts · 2y
The only thing I see they did wrong was to disclose the vulnerability before waiting for a comment from the software company.