8 ms·

So is this still a vulnerability? Time to do some more digging boys!

by penagwin 8y ago

deleted 8y ago
[deleted]
saagarjha 8y ago
In the off chance that you're serious, this sounds like a great way to land yourself in federal prison.
- walrus01 8y ago
  As if blackhats in Vladivostok are particularly afraid of the FBI. Once the vulnerability is public, if that stuff is still connected to the public Internet, game over.
  - kbenson 8y ago
    I'm pretty sure this article is all that was required for some enterprising people to do their own research and find some of the same vulnerabilities. I imagine we might see some interesting damages outlined in some lawsuits from casinos against Atrient.
- WrtCdEvrydy 8y ago
  > a great way to land yourself in federal prison. For what? Checking shodan and seeing that people don't know how to write secure code.
  - saagarjha 8y ago
    For actively exploiting a bug in a piece of software for personal gain, which is much less defensible than simply finding vulnerabilities.
  - wil421 8y ago
    Ask Weev how it worked out for him.
  - pm90 8y ago
    Dude, just don't. I get the excitement of knowing how easy it is to do this stuff. But US Federal Laws can be interpreted in creative ways to throw you in Federal Prison. And I think that will continue to be the case until American society (the Jury, in US) learns more about how these things work.
  - penagwin 8y ago
    Checking for vulnerabilities IMO shouldn't be considered a crime - it's not a clear malicious intent. Sure if somebody is trying to open car doors in the parking lot that may warrant investigation - but for all we know they were just trying to warn drivers they left it unlocked, no actual crime has yet been committed. But after you have this data, I jokingly suggested "welp may as well capitalize on it". But missing with somebody elses money, especially a large fin-tech company will get a lot of people upset, people with money to sue, not to mention it's the FBI's job to go after you, especially at this scale. You could certainly try just be aware the reaction will not be favorable for you at all.
kache_ 8y ago
You and a lot of other people are doing some digging right now

So is this still a vulnerability? Time to do some more digging boys!

deleted 8y ago

[deleted]

saagarjha 8y ago

In the off chance that you're serious, this sounds like a great way to land yourself in federal prison.

walrus01 8y ago
As if blackhats in Vladivostok are particularly afraid of the FBI. Once the vulnerability is public, if that stuff is still connected to the public Internet, game over.
- kbenson 8y ago
  I'm pretty sure this article is all that was required for some enterprising people to do their own research and find some of the same vulnerabilities. I imagine we might see some interesting damages outlined in some lawsuits from casinos against Atrient.
WrtCdEvrydy 8y ago
> a great way to land yourself in federal prison. For what? Checking shodan and seeing that people don't know how to write secure code.
- saagarjha 8y ago
  For actively exploiting a bug in a piece of software for personal gain, which is much less defensible than simply finding vulnerabilities.
- wil421 8y ago
  Ask Weev how it worked out for him.
- pm90 8y ago
  Dude, just don't. I get the excitement of knowing how easy it is to do this stuff. But US Federal Laws can be interpreted in creative ways to throw you in Federal Prison. And I think that will continue to be the case until American society (the Jury, in US) learns more about how these things work.
- penagwin 8y ago
  Checking for vulnerabilities IMO shouldn't be considered a crime - it's not a clear malicious intent. Sure if somebody is trying to open car doors in the parking lot that may warrant investigation - but for all we know they were just trying to warn drivers they left it unlocked, no actual crime has yet been committed. But after you have this data, I jokingly suggested "welp may as well capitalize on it". But missing with somebody elses money, especially a large fin-tech company will get a lot of people upset, people with money to sue, not to mention it's the FBI's job to go after you, especially at this scale. You could certainly try just be aware the reaction will not be favorable for you at all.

kache_ 8y ago

You and a lot of other people are doing some digging right now