4 ms·
No, exposing public security holes is not a crime.
by driverdan 15y ago
No, exposing public security holes is not a crime.
- tptacek 15y agoThat's a point that can be very expensive to make. The line is blurry. You're unlikely to cross it testing for XSS (particularly this reflected stuff). But it can be easy to cross it looking for (and, particularly, at) SQL injection or authorization bypass. You should be extremely cautious testing other people's sites for security vulnerabilities.