4 ms·
I once reported a leak on a government website to the National Cyber Security Centre, hoping to get a cool t-shirt out of it ("I hacked the Dutch government and
by systemtest 3y ago
I once reported a leak on a government website to the National Cyber Security Centre, hoping to get a cool t-shirt out of it ("I hacked the Dutch government and all I got was this lousy t-shirt").
Turns out that system wasn't government but contracted out to the private sector. That got me into a lot of trouble since I reported a leak on a private company. Luckily I didn't get arrested or sued after explaining my intentions.
I have since not disclosed anything I find. Too much of a risk.
- lucb1e 3y agoAh yes, the National Cyber Security Centre is constantly in the news for arresting and suing people that report vulnerabilities to them /s ... seriously, what?
- systemtest 3y agoIf you read my comment it will become clear to you that the National Cyber Security Centre did not have any intention of suing me, as the vulnerable system was not their responsibility. The NCSC has not been in the news for arresting people and suing them.