Re:Google Account Recovery Vulnerability
by expertmind on Friday November 22, 2013 @01:19AM
(#6779523)
That is sad. There should be a some kind of TOS for public internet companies. While this kind of exploits does not hurt google but they can be very dangerous for users.
[ Parent
| on HN ]
Re:Google Account Recovery Vulnerability
by markeganfuller on Friday November 22, 2013 @03:47AM
(#6779815)
Sounds like it would be a good extension to Data Protection / Computer Abuse/Misuse Acts depending on what it allows access to. Anyone pointing out a failing in your system should not be prosecuted unless they've actually committed a crime.
Re:Google Account Recovery Vulnerability
by mdpopescu on Friday November 22, 2013 @07:42AM
(#6780417)
That doesn't actually help; you need to think more like a prosecutor. By investigating the vulnerability they have, in fact, committed a crime - see for example http://blog.erratasec.com/2013/09/how-weevs-prosecutors-are-...