31 ms·
Is it hacking when there is no "breach?" If I serve a file with info I didn't intend for the world to see at example.com/secret and you access it, did you comm
by j_w 2y ago
Is it hacking when there is no "breach?"
If I serve a file with info I didn't intend for the world to see at example.com/secret and you access it, did you commit a crime? Clearly no.
Given that, you have no way to even know if the data which was available publicly contained any private information. This guy is doing a fine public service, and any company he helps should pay him for saving their asses.
- wazzaps 2y agoYou can still get dragged to court for it[1], even if you may (eventually) win, lawyers are expensive. [1]: https://techcrunch.com/2021/10/15/f12-isnt-hacking-missouri-governor-threatens-to-prosecute-local-journalist-for-finding-exposed-state-data/ https://techcrunch.com/2021/10/15/f12-isnt-hacking-missouri-...
- j_w 2y agoBut he wasn't dragged to court for it. https://missouriindependent.com/2022/02/11/prosecutor-isnt-pressing-charges-against-reporter-who-found-flaw-in-state-website/ https://missouriindependent.com/2022/02/11/prosecutor-isnt-p...
- hobs 2y agoProsecutors are not famous for caring about internet arguments, weev (who is a piece of shit for other reasons) got sentenced to 41 months for effectively incrementing an integer in a url - https://www.justice.gov/usao-nj/pr/new-york-man-sentenced-41-months-prison-hacking-att-s-servers https://www.justice.gov/usao-nj/pr/new-york-man-sentenced-41... "he concocted the fiction that he was trying to make the Internet more secure, and that all he did was walk in through an unlocked door. The jury didn’t buy it, and neither did the Court in imposing sentence upon him today.”"