4 ms·
Belgium launches nationwide safe harbor for ethical hackers
- PedroBatista 4y ago[flagged]
- Retr0id 4y ago> Do not publicly disclose information about the vulnerability and vulnerable systems without the CCB’s consent This one would be a sticking point for me, personally. When disclosing vulns, I am extremely reluctant to relinquish control over who I tell and when. I wonder if participation in this mechanism could increase one's overall liability.
- sva_ 4y agoThis makes it sound like they're fishing for some zero-days.
- tptacek 4y agoIf they wanted zero days they would just buy them, like everybody else does.
- meinheld111 4y agoWell they are paying with protection
- jraph 4y agoI don't think so, they require you to also tell the author as soon as possible, if not before. I'd think notifying them as soon as possible and asking them for permission for publicly disclosing would let them protect you more efficiently.
- tptacek 4y agoYou presumably retain the ability to control disclosure about vulnerability research you conduct against authorized targets; the most common class of authorized targets is "software you run yourself, in settings where vulnerabilities don't involve talking to other people's computers/servers". Where people get into trouble is when they authorize themselves to conduct research against other people's computers. If you want firm control over the disclosure of your vulnerabilities, find other people's computers that authorize testing, or test your own computers.
- frank_bb 4y ago[dead]
- papruapap 4y agoI guess this only applies if they pentest a belgian institution? Otherwise that would be prosecute right after the leave the country
- wongarsu 4y agoBasically yes. "any systems, networks, or applications located in Belgium". Of course you might still be prosecuted outside Belgium, e.g. if you pentest an Oracle setup in Belgium, and Oracle takes issue and files charges against you in the US. But that is less likely to happen or succeed.
- deleted 4y ago[deleted]
- 1024core 4y agoMaybe they can invite Snowden over then?
- wongarsu 4y agoIt would be a nice guesture. I'm not sure how he would get there safely though. Planes have a nasty habbit of being forced to land somewhere on route in these situations.
- elif 4y agoAs long as he can get into the Schengen region, he can get to Belgium in a van without any paper trail. I'm not advocating illegally entering any eastern EU countries, nor suggesting that it is easy, but from a physics standpoint it doesn't occur to me as exceptionally impractical for a determined and resourceful actor with international support, considering the mountainous terrain of Hungary, Estonia, Latvia, etc.
- ChuckNorris89 4y agoAh yes, Snowden going to Belgium, headquarters of NATO. Surely he'll be safe there from the US reach and not get deported. /s
- tptacek 4y agoSnowden isn't in legal trouble over vulnerability research.
- NicoJuicy 4y agoWho would use it/move to there? Considering taxes in Belgium are the highest in Europe and almost the highest in the world.
- elric 4y agoAre tax rates the most important factor for relocating to somewhere? Might want to look at what you get in return for those taxes.
- NicoJuicy 4y agoWeather ain't great either. You're getting a lot back if you're unemployed and actual Belgian though. Some people aren't even working because the difference between working and not, is too low. And if you're ill, you don't have to worry about finance too... That's it
- WirelessGigabit 4y agoIt's even worse. At minimum wage, the cost of commuting and daycare are more than the diff of work and unemployment. So what's enticing those people to go back to work if it literally costs them money? And I don't mean to say that unemployment must go down. On the contrary, at minimum, it must be beneficial to go to work. So minimum wage must go up. Problem is that then unemployment will go up too, as that is tied to minimum wage.
- NicoJuicy 4y agoUnemployment benefits shouldn't be unlimited in time. For the rest, i agree.
- tverbeure 4y agoIt's only high for regular income. Belgium does not have a capital gains tax. If you start a company, it does well, and you sell it, you pay zero taxes. Similarly, when you receive stock options after joining a company, you get taxed immediately, but you don't pay taxes when you exercise them. That's really backwards when you join an established company (because you'll pay taxes on something that might actually be worth nothing), but it's fantastic when you receive stock options in an early stage startup, with options that are worth pennies.
- deleted 4y ago[deleted]