3 ms·
The only thing putting Mercedes at risk are previous sentences going heavy handed on ethical security researchers that bothered contacting german companies. You
by 0x_rs 3y ago
The only thing putting Mercedes at risk are previous sentences going heavy handed on ethical security researchers that bothered contacting german companies. You can find some examples online where just "poking" with leaked credentials not unlike OP was not looked favourably upon.
https://www.theregister.com/2024/01/19/germany_fine_security/ https://www.theregister.com/2024/01/19/germany_fine_security...
https://www.darkreading.com/vulnerabilities-threats/another-researcher-hit-with-threat-of-german-anti-hacking-law https://www.darkreading.com/vulnerabilities-threats/another-...
- waihtis 3y agothere's a world of difference in contacting a company via an ethical vulnerability disclosure program and doing so without one in place. it really shouldn't be that difficult to understand. Being "german" has nothing to do with it