> Not sure where "here" is for you, but in the United States ...which is exactly why I was asking which jurisdiction OP is in. Kind of annoying when that infor

> Not sure where "here" is for you, but in the United States ...which is exactly why I was asking which jurisdiction OP is in. Kind of annoying when that information is omitted. I work in Germany but am from the Netherlands; both cultures and the resulting laws are quite similar anyway. > Conducting unauthorized security testing on a company competitor will absolutely get you fired. In the US, maybe. If all US companies are like OP's. For a data point from Europe, I actually asked my employer because it seems people here (mostly from the US afaik) thought I had too much confidence in my employer in other comments. I commented here with what I asked and their reply: https://news.ycombinator.com/item?id=30710078 https://news.ycombinator.com/item?id=30710078 It's also a bit different to look into a product meant for the general public (that's how I understood OP's situation to be), or if you actively seek out to hack a competitor's infrastructure and mess with them (not what OP was doing from my understanding).