3 ms·

In that case, it's his job to enter holes. Nobody asked this developer to go through any holes. If you see a hole in your hotel room leading to another room, y

In that case, it's his job to enter holes. Nobody asked this developer to go through any holes. If you see a hole in your hotel room leading to another room, you don't go through it to see if there is anything to steal, even if you go through holes a lot for your job. You inform the owner that there is a hole.

Prickle 3y ago
His job was to debug the program though, so wouldn't that literally be all about poking around holes? His job was to solve a problem with a database's log files. He found another second database. "Maybe this second database is causing duplicate log files?" so he goes in and looks. It makes sense to me. Based on the german article: (machine translated to english) > The software of Modern Solution had a database of the defendant's customer "fully littered with log reports," says the defence lawyer. His client was then given the order from his customer to solve this problem. > The defendant then determined that the software from Modern Solution established a MySQL connection over the Internet to the servers of the Gladbeck company. ...the defendant has first assumed that the software on his customer's server will connect to a Modem Solution database that was only intended for his customer and contained only his data. From the read-out database name, this sounded quite plausible. > However, the defendant quickly discovered that the corresponding database contained much more information. It later turned out that the data here was included Modern Solutions customers and from all end customers whose online shops were included. According to his own statement, the defendant had directly separated the database connection when he discovered that he had access to other customers' data. > the programmer contacted the affected company with the help of a tech blogger, which then closed the security gap and displayed the programmer at the police.
- Anamon 3y ago
  To disconfuse: the "displayed" in the final sentence is a mistranslation from "anzeigen", which means pressing charges. "Thank you for saving us from liability hell and damages by helping us fix our shit. Police officers should arrive at your door shortly." I hope this company ends up paying dearly for this. Anything else would be a devastating precedence for information security. A business like that has no business staying in business.

Prickle 3y ago

His job was to debug the program though, so wouldn't that literally be all about poking around holes? His job was to solve a problem with a database's log files. He found another second database. "Maybe this second database is causing duplicate log files?" so he goes in and looks. It makes sense to me. Based on the german article: (machine translated to english) > The software of Modern Solution had a database of the defendant's customer "fully littered with log reports," says the defence lawyer. His client was then given the order from his customer to solve this problem. > The defendant then determined that the software from Modern Solution established a MySQL connection over the Internet to the servers of the Gladbeck company. ...the defendant has first assumed that the software on his customer's server will connect to a Modem Solution database that was only intended for his customer and contained only his data. From the read-out database name, this sounded quite plausible. > However, the defendant quickly discovered that the corresponding database contained much more information. It later turned out that the data here was included Modern Solutions customers and from all end customers whose online shops were included. According to his own statement, the defendant had directly separated the database connection when he discovered that he had access to other customers' data. > the programmer contacted the affected company with the help of a tech blogger, which then closed the security gap and displayed the programmer at the police.

Anamon 3y ago
To disconfuse: the "displayed" in the final sentence is a mistranslation from "anzeigen", which means pressing charges. "Thank you for saving us from liability hell and damages by helping us fix our shit. Police officers should arrive at your door shortly." I hope this company ends up paying dearly for this. Anything else would be a devastating precedence for information security. A business like that has no business staying in business.