3 ms·
It's pretty unambiguously clear that he didn't use the fruits of the vulnerability in a black hat way to hurt the end users, however. No and I don't think that
by ErrantX 16y ago
It's pretty unambiguously clear that he didn't use the fruits of the vulnerability in a black hat way to hurt the end users, however.
No and I don't think that accusation has ever been made.
However; he has used the data very unethically and I don't think that it is reasonable for him to claim journalistic privileges or the cover of full disclosure to assuage that.
- Robin_Message 16y agoI have not been following the case, nor am I an expert on security disclosure. Could you expand on how he has used the data and what was very unethical about the uses made? EDIT TO ADD: Reading your other postings I think you mean giving a copy of the leaked data to Gawker media was unethical. Is that so bad, considering they redacted it and appeared to generally handle it responsibly?
- ErrantX 16y agoYes. Your latter point does (and I cant believe I am saying this...) credit to Gawkers handling of the data. But Goatse handed it out (so far as we know, I admit) with no idea of what would be done with it. Also from a security perspective (at least from mine) it is just unethical to hand over data you got - no matter how trivial :)