dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
8
share rss forum feed

Skippy25

join:2000-09-13
Hazelwood, MO
reply to FFH5

Re: Security Researchers? or really just hackers?

I would agree somewhat but would require that to be considered a hacker you must exploit it for personal gain and not give the company a chance to fix it. Both of which were violated by these 2 individuals.

If you "hack" a system privately (permission or not), inform them of such and provide them a reasonable time to fix it and they don't, that is on them if you then make it public. That is providing a public service.

You stating the only legitimate security is if you are hired is pure BS. Most companies will not put the money into finding them and even more wont admit it is there and fix it until they are forced to. Thus, it is a public service unless they are extorting the company or trying to use it for personal gain in some way.


Mizzat
Will post for thumbs
Premium
join:2003-05-03
Atlanta, GA
kudos:1
The problem with your definition is that it isn't the definition in the law. It is an unaurthorized connection to a computer. Did you get permission to access the computer dslreports.com is on? No? Well you're in violation of the same law. One could argue that is is publically accessable, well so was the information they got. It's a poorly written law, but they "hackers" could have conducted themselves better. Also, from what I read, they did contact AT&T prior to leaking it to Gawker.

Skippy25

join:2000-09-13
Hazelwood, MO
I would agree accessing data would be unlawful, finding a vulnerability by "hacking" is not.

It is one thing to discover an open door, it is another to enter it. Sorry if I was not clear in what I wrote.

In my personal opinion, the internet is a much safer place because of rogue hackers that do it just to do it and not exploit. I welcome and thank them.

It are the morons like these 2 that try to game the system for exploitation that I think should be lined up in front of a small hole they just dug.


Anonymous_
Anonymous
Premium
join:2004-06-21
127.0.0.1
kudos:2
Reviews:
·Time Warner Cable
said by Skippy25:

I would agree accessing data would be unlawful, finding a vulnerability by "hacking" is not.

It is one thing to discover an open door, it is another to enter it. Sorry if I was not clear in what I wrote.

In my personal opinion, the internet is a much safer place because of rogue hackers that do it just to do it and not exploit. I welcome and thank them.

It are the morons like these 2 that try to game the system for exploitation that I think should be lined up in front of a small hole they just dug.

I found a bug on a website from a major company. That allowed me to re log in (to my user id) to the site with out entering my password vulnerability only worked if you had psychical access to your computer. I promptly notified the said company and they fixed it.