News for hackers. Stuff that matters.

A comment on Google Account Recovery Vulnerability. Parent comment

Re:Google Account Recovery Vulnerability by tropicalmug on Friday November 22, 2013 @12:44AM (#6779456)
11 days? Two weeks? A month? Never?

Not every company values this sort of feedback from their users. Some go out of their way to prosecute those that break their services this way.

[ Parent | on HN ]
Re:Google Account Recovery Vulnerability by expertmind on Friday November 22, 2013 @01:19AM (#6779523)
That is sad. There should be a some kind of TOS for public internet companies. While this kind of exploits does not hurt google but they can be very dangerous for users.
[ Parent | on HN ]
Re:Google Account Recovery Vulnerability by markeganfuller on Friday November 22, 2013 @03:47AM (#6779815)
Sounds like it would be a good extension to Data Protection / Computer Abuse/Misuse Acts depending on what it allows access to. Anyone pointing out a failing in your system should not be prosecuted unless they've actually committed a crime.
[ Parent | on HN ]
Re:Google Account Recovery Vulnerability by mdpopescu on Friday November 22, 2013 @07:42AM (#6780417)
That doesn't actually help; you need to think more like a prosecutor. By investigating the vulnerability they have, in fact, committed a crime - see for example http://blog.erratasec.com/2013/09/how-weevs-prosecutors-are-...
[ Parent | on HN ]