News for hackers. Stuff that matters.

A comment on Ask HN: Anonymous person sent proof of SSH access to our production server. Parent comment

Re:Ask HN: Anonymous person sent proof of SSH access to our ... by clort on Wednesday July 27, 2016 @11:20AM (#12173525)
Maybe offering a reward is a good way to reduce the anonymity of the person, since rewards can be tracked.

Speaking only for myself.. If I were to go the trouble to anonymously tip somebody off about a security vulnerability, it would be because I cared that they were secure and that I did not wish to be identified. I would neither expect nor accept a reward.

[ Parent | on HN ]
Re:Ask HN: Anonymous person sent proof of SSH access to our ... by brokenmachine on Thursday July 28, 2016 @12:08AM (#12178260)
Yes but a white hat like you would probably give at least some hints on how to fix it or what vulnerability you have discovered, not just a screenshot showing that you have/had access.

I think just the fact that they didn't do this points to malevolence. I would expect the ransom demands to follow shortly.

[ Parent | on HN ]