3 ms·
Is gathering up the credentials of employees not also a privacy violation? At this point you're going way beyond proving that you have access to something - you
by webvictim 11y ago
Is gathering up the credentials of employees not also a privacy violation? At this point you're going way beyond proving that you have access to something - you're actively trying to probe and see how deep the rabbit hole goes. I don't (personally) believe that this is acceptable behaviour under a white hat program.
- larssorenson 11y agoI see your point but I'm not sure if having passwords like 'changeme' qualifies as being a privacy violation... You should almost expect it to happen at that point. But I do recognize that cracking passwords goes a step too far.