cybersecurity

3249 readers

9 users here now

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Community Rules

Be kind
Limit promotional activities
Non-cybersecurity posts should be redirected to other communities within infosec.pub.

Enjoy!

founded 1 year ago

MODERATORS

shellsharks@infosec.pub

tweedge@infosec.pub

Court charges dev with hacking after cybersecurity issue disclosure (www.bleepingcomputer.com)

submitted 9 months ago by overflow64@lemmy.ml to c/cybersecurity@infosec.pub

3 comments fedilink hide all child comments

top 3 comments

sorted by: hot top controversial new old

[–] ApathyTree@lemmy.dbzer0.com 25 points 9 months ago (2 children)

Well if that isn’t a great way to ensure nobody comes forward when they find major vulnerabilities, idk what is.

Hope he wins the appeal.

[–] Funkymatt@lemmy.world 6 points 9 months ago* (last edited 9 months ago)

It looks like the charges are from using the credentials they found not just for finding them. It's definitely a crap charge because logging into the DB exposed the wider issue of being able to access other customers records.

[–] xinayder@infosec.pub 1 points 9 months ago

The only thing I see they did wrong was to disclose the vulnerability before waiting for a comment from the software company.