> If you wanted to study this risk, how would you go about doing it? The main factor in doing this ethically is obtaining consent from your research subjects.

> If you wanted to study this risk, how would you go about doing it? The main factor in doing this ethically is obtaining consent from your research subjects. I believe that some Red Teams test precisely these sorts of security mechanisms in commercial software projects and there are solid comments else discussing procedures they use.