News for hackers. Stuff that matters.

A comment on #1 CSRF Is A Vulnerability In All Browsers. Parent comment

Re:#1 CSRF Is A Vulnerability In All Browsers by kami8845 on Friday March 30, 2012 @06:17PM (#3778394)
do some friendly hacking to annoy the admins (but only them), and watch them fix the issue in real-time
[ Parent | on HN ]
Re:#1 CSRF Is A Vulnerability In All Browsers by inchcombec on Friday March 30, 2012 @06:26PM (#3778418)
That is TERRIBLE advice. I don't know exactly what you mean by 'friendly hacking' but ANY exploitation of a website vulnerability without that site's permission would be a crime pretty much anywhere; even if it isn't malicious. It would be far from the first time that an administrator or owner didn't understand that the person was trying to help or just didn't really want to deal with it and it then just ended up being an issue of the vulnerability discoverer vs. law enforcement. Never a fun situation even if you win.
[ Parent | on HN ]
Re:#1 CSRF Is A Vulnerability In All Browsers by redthrowaway on Friday March 30, 2012 @06:54PM (#3778531)
Not much different from the recent Github hack, really.
[ Parent | on HN ]
Re:#1 CSRF Is A Vulnerability In All Browsers by flurdy on Friday March 30, 2012 @07:28PM (#3778631)
Same guy :)
[ Parent | on HN ]