4 ms·
You may want to read this, as it explains why no mea culpa was necessary: https://www.justice.gov/opa/pr/department-justice-announces-new-policy-charging-cases-
by talideon 3y ago
You may want to read this, as it explains why no mea culpa was necessary: https://www.justice.gov/opa/pr/department-justice-announces-new-policy-charging-cases-under-computer-fraud-and-abuse-act https://www.justice.gov/opa/pr/department-justice-announces-...
TL;DR: it was good faith security research, and the US DoJ doesn't prosecute that.
- theptip 3y agoThanks, that does change the expectations a bit. Personally I'd still probably not engage in unsolicited (still illegal by the letter of the law) pentesting with just the promise that the DoJ won't prosecute as long as they agree it was in good faith. But I agree that pinkie promise does make it a bit less risky.