4 ms·

Isn't this the opposite of good samaritan laws? If you see something, say, nothing, do nothing. I wonder, if it's illegal to find these problems, would it be l

• IshKebab 3y ago
  > would it be legal to notice there might be a problem, stop, and short the company stock? Yes. As long as you don't use inside information this would be perfectly legal. It's pretty much what companies like Hindenburg Research do. The problem you would find if you actually tried to do this is that investors pretty much don't care about security issues, so the stock price wouldn't go down after you revealed the flaw. That's even if they're publicly traded which doesn't appear to be the case here. I think it's these guys but I don't speak German so don't quote me: https://www.modernsolution.net/ https://www.modernsolution.net/
• hipadev23 3y ago
  Issue is those flaws can go unnoticed for years, so you may need to give them a nudge for your short to be successful. There’s also the fact that at least for US companies massive data leaks/breaches often have no negative financial impact on the company.
• ajsnigrutin 3y ago
  Tor + twitter (if you can actually register there with tor): "Hey, I just happened to find out that there is a password here in this app, at offset X, here's the screenshot from the hexdump with the visible password... I'm not allowed to check what that password is, even though there is also a username and a host next to it, and clear indication that it's an sql connection, but i'm not testing this, but i'm warning you, the general public, that this here exist, please don't try connecting to this IP using this username and password, thank you!"