3 ms·
He posted the same on the python argentina mailing list last night. Unbelievable; he merely published security holes on publicly available code. Nothing wrong
by hobarrera 11y ago
He posted the same on the python argentina mailing list last night. Unbelievable; he merely published security holes on publicly available code.
Nothing wrong (nor legally, nor morally) there. It's not the first hole to get published recently either.
- threeseed 11y agoIt IS legally and morally wrong to reveal security holes before there has been an opportunity for it to be fixed though. Security researchers almost always do the "right thing" before potentially unleashing mayhem. Not saying he didn't do this just that it isn't a black/white issue.
- lawnchair_larry 11y agoNo, it is neither illegal nor immoral.
- madaxe_again 11y agoIf it's less than 24 hours before the election, it's absolutely right to go public. Or are you in favour of electoral fraud? Republican, perchance? Work for diebold?
- DanBC 11y agoHe should have disclosed it to the regulators before going public.
- NickNameNick 11y agoThe debate between 'responsible disclosure' and public or 'full disclosure' has been argued ad nauseum elsewhere. but it really comes down to trust. If you don't trust the people you are responsibly disclosing to, to actually fix the problem, or worse to not sue you or attempt to get you charged as a criminal (the CFAA is particularly abusable), then full, public disclosure may be your only option to force the vendor to fix their product or service. Remember, it's already broken, and you may not be the first person to have noticed.