Re:North Korean fake job interview led to $6.3B Binance heist
by Aurornis on Wednesday November 04, 2026 @07:45PM
(#50373528)
Compromising employee personal devices is strictly out of scope for any security testing I've seen.
> Though I agree that pentesters going after personal devices is ethically dubious.
It's not just ethically dubious. It crosses a lot of legal boundaries. A company can consent to have their personal devices hacked. An employee doesn't automatically consent to let a company's contractors access their personal devices.
> Though I agree that pentesters going after personal devices is ethically dubious.
It's not just ethically dubious. It crosses a lot of legal boundaries. A company can consent to have their personal devices hacked. An employee doesn't automatically consent to let a company's contractors access their personal devices.