4 ms·
The fraud is that these vulnerable sites are risking their users' private data, while pretending they are not.
by 0xdeadbeefbabe 13y ago
The fraud is that these vulnerable sites are risking their users' private data, while pretending they are not.
- josh-wrale 13y agoSecurity is a best effort thing. Get used to it. Make note of which providers fell short here and act accordingly. Questions?
- 0xdeadbeefbabe 13y agoImprisoning users who check for the vulnerability doesn't seem like a best effort. It also doesn't seem likely.
- josh-wrale 13y agoI see you're conflating my arguments. Anyway, I'll upvote you and step aside. Edit: On second thought. Go ahead and conflate them. As I said, don't risk the reputations of your users. That goes for everyone.
- pilom 13y agoRight but exploiting Heartbleed to dump memory of the target webserver is most likely "unauthorized use of a computer system" and thus in violation of the CFAA.