News for hackers. Stuff that matters.

A comment on 18yo arrested for reporting a bug in the new Budapest e-Ticket system. Parent comment

Re:18yo arrested for reporting a bug in the new Budapest e-T... by imhoguy on Monday July 24, 2017 @04:32AM (#14836771)
I have read some advice in the past that one should report vulnerabilties via officially known independent security related group (white hat) or via a journalist. The point is to get some legal backing just in case. Does anybody have an experience with such way?
[ Parent | on HN ]
Re:18yo arrested for reporting a bug in the new Budapest e-T... by bondant on Monday July 24, 2017 @09:05AM (#14838075)
In France, you can report vulnerabilities to the ANSSI (National Cybersecurity Agency of France). The agency stays somewhat neutral between justice and the company with vulnerabilities since ANSSI must protect confidentiality of their informer. Informations can be sent by email or postal service.

http://www.ssi.gouv.fr/en-cas-dincident/vous-souhaitez-decla...

[ Parent | on HN ]
Re:18yo arrested for reporting a bug in the new Budapest e-T... by pyroinferno on Monday July 24, 2017 @04:05PM (#14842149)
I report all the vulnerabilities I find to the NSA. Very nice people.
[ Parent | on HN ]