We, as an industry, need to create an institution that lobbies for fair laws on the handling of computer crimes as well as creates public awareness campaigns th

We, as an industry, need to create an institution that lobbies for fair laws on the handling of computer crimes as well as creates public awareness campaigns that help people better understand cyber crimes. I'd like to see "Good Samaritan" laws for cyber crime. This kind of thing is what enables cyber crime. I personally find lots of bugs with APIs, since my job involves dealing with so many of them. I basically don't report them for fear of prosecution. There's already a fear in the back of my mind when I'm trying to work around such bugs that someone will come after me, but at least I have some plausible deniability to say, "I just wrote shitty software." Whereas, if I report a bug, that means I knew about it and admit to "probing" it to elicit more information. I literally spent 4 hours this morning working around a vendor API bug.