Report a Vulnerability?

| | Comments (0)
Read this story about a hacker who reported a security vulnerability and went to jail for it. Forget for a moment that he might have been violating an NDA, or that he might have had less-than-pure motives. Focus on the fact that he was convicted and jailed for causing an "impairment to the integrity or availability of data, a program, a system, or information without authorization" by disseminating the information.

I note that I have committed this "crime" more than once, reporting security vulnerabilities about Slash. Many of you reading this likely have as well, with other projects.

Now think about whether or not you will release security notices again any time soon.

Now Playing: Without You (Bonus Track) - Lenny Kravitz (5)

use.perl.org

Leave a comment

<pudge/*> (pronounced "PudgeGlob") is thousands of posts over many years by Pudge.

"It is the common fate of the indolent to see their rights become a prey to the active. The condition upon which God hath given liberty to man is eternal vigilance; which condition if he break, servitude is at once the consequence of his crime and the punishment of his guilt."

About this Entry

This page contains a single entry by pudge published on August 18, 2003 3:17 PM.

Mac-Carbon-0.54 Released was the previous entry in this site.

iChat AV is the next entry in this site.

Find recent content on the main index or look in the archives to find all content.