4 ms·
This reminds me of the Vtech hacker story. Darknet diaries did an excellent podcast on it [0]. As someone having worked in pentesting, I have mixed feelings ab
by LeonM 8y ago
This reminds me of the Vtech hacker story. Darknet diaries did an excellent podcast on it [0].
As someone having worked in pentesting, I have mixed feelings about this situation. Whitehat or not, the hacker knew that what he was doing was illegal. Of course this gives the hacker a dilemma, as not disclosing might result in a blackhat exploiting the same vuln.
[0] https://darknetdiaries.com/episode/2/ https://darknetdiaries.com/episode/2/
- Cthulhu_ 8y agoThe hacker in this case, if they want to do the Right Thing but without any reward, is report it anonymously - they of all people should know how to hide their tracks. Creating a throwaway e-mail address through half a dozen proxies and/or TOR is relatively easy.
- Timpy 8y agoThe hacker did report it anonymously, there's no evidence that the hacker was caught from the email they reported the vulnerabilities from. They of all people should know how hard it is to remain completely untraceable.
- xyzzy123 8y agoDon’t give other people power over you would have to be the first rule. Oh gee, a “blackhat” exploits it. Moral dilemma! Who cares? You can’t control what other people will do on the internet and if it’s a target worth more than pennies of crypto cpu someone else has most likely done it already. 9/10 there’s like a dozen webshells on that box if there’s a good bug to be had. I srsly don’t get the hand wringing folks do. Shells are shells and you know what you be doing. But every year there are more summer children and I suppose we should look after them.