Re:Governor vows criminal prosecution of reporter who found ...
by kelnos on Thursday October 14, 2021 @04:10PM
(#28869363)
> Essentially identical to blaming users for finding an unsecured S3 bucket or MongoDB instance
I agree that it's unreasonable to blame users for finding things like that. But if those same users are downloading all the data and making use of it for their own purposes, that's not ok. Finding a vulnerability and reporting it is an admirable thing to do; exploiting that vulnerability yourself is not.
I agree that it's unreasonable to blame users for finding things like that. But if those same users are downloading all the data and making use of it for their own purposes, that's not ok. Finding a vulnerability and reporting it is an admirable thing to do; exploiting that vulnerability yourself is not.