5 ms·
Way too much risk for too little reward. All it takes is a couple of the wrong people to catch wind of what happened for it to spiral into hysteria and a phone
by c7DJTLrn 4y ago
Way too much risk for too little reward. All it takes is a couple of the wrong people to catch wind of what happened for it to spiral into hysteria and a phone call to the authorities, and the next thing you know you're being charged for a crime by people who have no technical understanding of what actually happened.
Part of the reason we have a crisis in computer security is because the good guys have to be extremely careful about the systems they poke. They can only poke companies with responsible disclosure policies in specific ways. It shouldn't be a crime to find and report vulnerabilities in good faith, but that's how it is. I almost got myself in big trouble for doing so on one occasion.
- ikiris 4y agoit's not hysteria to report people for crossing the line and blatantly breaking computer security law.
- c7DJTLrn 4y agoWhat law does it break if you publish a package that displays a popup and somebody else voluntarily downloads and executes it? There's no maliciousness, no harm done, yet somebody would find a way to get you prosecuted for it because the legislation is vague and 30 years behind. Meanwhile the actual bad guys are getting away with draining bank accounts and dumping databases with millions of peoples' personal information.