6 ms·
C'mon. It's well under a dollar. And that's a 10 second idea, I'm sure there are other options. (edit) That's not even considering that this cost can be carrie
by huhtenberg 14y ago
C'mon. It's well under a dollar. And that's a 10 second idea, I'm sure there are other options.
(edit) That's not even considering that this cost can be carried by the hotels. I'm sure they can cough up $500 to secure their facilities.
--
Please don't tell me that you, of all people on HN, think that there's no need for a private disclosure on this guy's part?
- tptacek 14y agoIt's way more than a dollar. How many locks could one technician replace/fix in an hour, and what's their hourly rate? "Me of all people"? Am I a spokesperson for "Responsible disclosure" now? I would have notified the vendor ASAP, and I might not have put the vendor name into the talk at all. But that's me, and I am super conservative about this stuff. Lots of very reputable security people would do exactly what Cody did.
- huhtenberg 14y agoNot in bulk. Hotel technicians install and service locks, I'm sure they'll manage to screw a bolt into a hole. They are salaried. "You" as a "sensible security guy". Or at least that was my impression of you based on what you post here.
- peterwwillis 14y agoFor clarification: lots of "very reputable security people" can also be total dicks. Hacker elitism does not encourage thoughtfulness.
- danielweber 14y agoAs an industry we are a pretty awful people.