3 ms·

> research like this > His crime: he was tasked with looking into a software that produced way too many log messages. The developer wasn't doing security rese

> research like this > His crime: he was tasked with looking into a software that produced way too many log messages. The developer wasn't doing security research. It sounds like they just had a bug they were looking into. Connecting to the database and realizing what it is to immediately disconnect and report it responsibly shouldn't be something that comes with punitive measures. As another commenter pointed out, this incentivizes people to sell this knowledge to others who will actually "misuse" it.

quickthrower2 3y ago
Everyone coder in Germany should unionize and go on a password strike. Refuse to do any part of your job that requires authentication unless you have a signed written statement verified by a lawyer as to the scope and use of the access. And then only use that level of access. Can you fix this bug? Sure, I'll be chilling on this sofa while you get me my access.