Re:Governor vows criminal prosecution of reporter who found ...
by judge2020 on Thursday October 14, 2021 @03:31PM
(#28868875)
Perhaps many people are spoiled and blinded by the SV megacorp culture of (usually) taking in bug reports and fixing them and handing out recognition/money. It would be nice if everyone accepted responsible disclosure, but that's not going to be the case until some legislation comes along to require it in the absence of malice.
[ Parent
| on HN ]
Re:Governor vows criminal prosecution of reporter who found ...
by LordDragonfang on Thursday October 14, 2021 @06:20PM
(#28870972)
It's not "spoiled" to expect, at worst, a thank you for pointing out a serious and extremely easily exploited vulnerability in public-facing code. You are inarguably doing the company a favor by disclosing it to them and helping them cover their ass and and in some cases lack of competency.
Something shouldn't have to be literally illegal to be considered shitty behavior. (Of course, people are often incentivised to be shitty, which is why legislation should also be applied to the issue)