But the practice is far too commonly to sue the discloser rather than the manufacturer of the software.

That’s what you get for posting shit like this under your real name for the sake of “portfolio”

I miss the web being less career focused and more crazy

Images and touchscreens have ruined the internet indeed.

Humanity has a long tradition of shooting the messenger.

And the message.

Many countries have very broad cybercrime laws - like prohibitions on "gaining unauthorised access to a computer system". And in some countries, even when you're in the right going to court can be a costly and time-consuming endeavour.

I know it seems like no such laws exist, as almost all serious cyber-crime is cross-border and done anonymously, making it nigh-impossible to prosecute.

But when you're an honest cybersecurity researcher, posting your findings openly under your own name? You're one of the few people who can be prosecuted.

Based on my experience in this industry, every brand does this, has done this, and is currently building out a replacement for their current system that does this in a slightly different way.

It's almost like something is happening to make sure this happens endlessly. It's probably nothing