3 ms·

> Apparently if I had denied it they would've got the police involved, but I was honest and upfront when they asked me. The problem is that this is usually a t

> Apparently if I had denied it they would've got the police involved, but I was honest and upfront when they asked me. The problem is that this is usually a terrible gamble to make. I'm glad it worked out for you, but my general advice for anybody else would be not to talk to the administrators, the same way you should never talk to the police. You never know if they're going to involve the police anyway after you spill the beans, and if they do, you'd rather they do it without already having a confession from you.

jbrooksuk 13y ago
> You never know if they're going to involve the police anyway after you spill the beans, and if they do, you'd rather they do it without already having a confession from you. I was definitely worried about this, but I figured that if anything, I've not lied to anybody, so I'd be happy with myself.
- chimeracoder 13y ago
  > if anything, I've not lied to anybody, so I'd be happy with myself. Unfortunately, that's not the way police encounters work in practice. Even if you've done nothing wrong, talking to the police can really only hurt you. For example, this re-enactment is based on a true story in which an old lady in Baltimore was convicted of drug possession because some neighborhood children had left a dime bag under her sofa (which she didn't even know about) https://www.youtube.com/watch?v=s7RYH8Py6lY[0] https://www.youtube.com/watch?v=s7RYH8Py6lY[0] Just because you think you've done nothing wrong doesn't mean others will agree, especially when it's their job to think you're guilty. [0] This is part of an hour-long video which shows several more cases like this, but for some reason I can't find the full version anymore.
  - deleted 13y ago
    [deleted]
gpvos 13y ago
So you don't report it at all? That would be irresponsible, as the holes would remain. Or you report it anonymously? Then, depending on how you got the access, they may find out who you are anyway from the logs. It's a reasonable course of action.
- chimeracoder 13y ago
  Well, this underscores the problem with the current state of affairs. In general, the person who discovers the vulnerability has every incentive not to disclose it. They have nothing to gain, and they take quite a risk in doing so.

jbrooksuk 13y ago

> You never know if they're going to involve the police anyway after you spill the beans, and if they do, you'd rather they do it without already having a confession from you. I was definitely worried about this, but I figured that if anything, I've not lied to anybody, so I'd be happy with myself.

chimeracoder 13y ago
> if anything, I've not lied to anybody, so I'd be happy with myself. Unfortunately, that's not the way police encounters work in practice. Even if you've done nothing wrong, talking to the police can really only hurt you. For example, this re-enactment is based on a true story in which an old lady in Baltimore was convicted of drug possession because some neighborhood children had left a dime bag under her sofa (which she didn't even know about) https://www.youtube.com/watch?v=s7RYH8Py6lY[0] https://www.youtube.com/watch?v=s7RYH8Py6lY[0] Just because you think you've done nothing wrong doesn't mean others will agree, especially when it's their job to think you're guilty. [0] This is part of an hour-long video which shows several more cases like this, but for some reason I can't find the full version anymore.
- deleted 13y ago
  [deleted]

gpvos 13y ago

So you don't report it at all? That would be irresponsible, as the holes would remain. Or you report it anonymously? Then, depending on how you got the access, they may find out who you are anyway from the logs. It's a reasonable course of action.

chimeracoder 13y ago
Well, this underscores the problem with the current state of affairs. In general, the person who discovers the vulnerability has every incentive not to disclose it. They have nothing to gain, and they take quite a risk in doing so.