3 ms·
The guy has no reason to expect a reward if the city has no bug bounty program. They could just sue him.
by lovasoa 6y ago
The guy has no reason to expect a reward if the city has no bug bounty program. They could just sue him.
- LegitShady 6y agoWhat are their damages? He's not required to disclose their security vulnerabilities to them. It's his work not theirs.
- high_density 6y agoI think lovasoa is pointing out what could happen in real-life, not 'what should happen morally/ethically/etc'.
- murphy1312 6y agoif he was smart, then he said nothing that sounds like blackmail. but you could say, for example, that I have to settle the expense of reproducing it and writing it down properly or something similar.
- Chris2048 6y agosue him for what? Discovering an exploit without disclosing the details?
- lovasoa 6y agoIt depends on the country, but in France for instance, there is a maximum sentence of one year in prison and a 15000€ fine just for "fraudulently accessing a data processing system", or trying to do so even if you don't succeed.
- Chris2048 6y agoAnd they'll prove that without knowing what the exploit is?