4 ms·
> Hussein, who has previously reported security issues at several startups, including MoviePass, Remine and Blind, said he reported the exposure to Clearview bu
by jiveturkey 7y ago
> Hussein, who has previously reported security issues at several startups, including MoviePass, Remine and Blind, said he reported the exposure to Clearview but declined to accept a bounty, which he said if signed would have barred him from publicly disclosing the security lapse.
seems grey to me
- twomoretime 7y agoI like this Hussein guy though. Glad he acted selflessly. Need more like him.
- newprint 7y agoI like Hussein as well !
- zentiggr 7y agoThe "accept the money and keep quiet" part? Yep, very gray.
- krageon 7y agoThat's not grey. Not signing a binding contract saying you need to keep your mouth shut is everyone's right.
- jiveturkey 7y agoeh? That's done literally all the time. But before the fact, not after. I believe ptacek was complaining about unilateral disclosure. I'm arguing that the researcher was pushed into it. However, it's still grey: just because you are presented with an option you simply don't like, doesn't mean you leak actual data. You can still disclose the breach without exposing the data. It's very grey.