News for hackers. Stuff that matters.

A comment on Crouching T2, Hidden Danger. Parent comment

Re:Crouching T2, Hidden Danger by totaldude87 on Wednesday October 07, 2020 @08:35AM (#24707544)
right on Spot, but also brings an ethical question ! lets say you identified an vulnerability or an hack or found something that will nullify a product's security. what would be the first step one should do?

1). send it to apple(or respective company) and if they don't respond after followups, put it on internet 2) put it on internet so it gains popularity and makes the aforesaid companies do something!

in some cases like these (those require physical access) this is fine, but what if someone uncovers a potential remote hack for every android or apple phone out there! which option would be ethical?

[ Parent | on HN ]
Re:Crouching T2, Hidden Danger by pmx on Wednesday October 07, 2020 @08:57AM (#24707685)
The right thing to do is follow Responsible Disclosure

https://www.bugcrowd.com/resource/what-is-responsible-disclo...

[ Parent | on HN ]
Re:Crouching T2, Hidden Danger by userbinator on Wednesday October 07, 2020 @09:35AM (#24707998)
I'd say it depends on what that "security" is. If it is remotely exploitable and can harm user freedom, tell the companies quietly. On the other hand, if it can enable user freedom, keep it to yourself and those who you trust to be on your side.
[ Parent | on HN ]