News for hackers. Stuff that matters.

A comment on Argentinean programmer's house raided after he found a security breach. Parent comment

Re:Argentinean programmer's house raided after he found a se... by threeseed on Saturday July 04, 2015 @10:33PM (#9832313)
It IS legally and morally wrong to reveal security holes before there has been an opportunity for it to be fixed though. Security researchers almost always do the "right thing" before potentially unleashing mayhem.

Not saying he didn't do this just that it isn't a black/white issue.

[ Parent | on HN ]
Re:Argentinean programmer's house raided after he found a se... by lawnchair_larry on Saturday July 04, 2015 @11:42PM (#9832419)
No, it is neither illegal nor immoral.
[ Parent | on HN ]
Re:Argentinean programmer's house raided after he found a se... by madaxe_again on Sunday July 05, 2015 @03:33AM (#9832835)
If it's less than 24 hours before the election, it's absolutely right to go public.

Or are you in favour of electoral fraud? Republican, perchance? Work for diebold?

[ Parent | on HN ]
Re:Argentinean programmer's house raided after he found a se... by DanBC on Sunday July 05, 2015 @04:41AM (#9832953)
He should have disclosed it to the regulators before going public.
[ Parent | on HN ]
Re:Argentinean programmer's house raided after he found a se... by NickNameNick on Sunday July 05, 2015 @09:49AM (#9833531)
The debate between 'responsible disclosure' and public or 'full disclosure' has been argued ad nauseum elsewhere. but it really comes down to trust.

If you don't trust the people you are responsibly disclosing to, to actually fix the problem, or worse to not sue you or attempt to get you charged as a criminal (the CFAA is particularly abusable), then full, public disclosure may be your only option to force the vendor to fix their product or service.

Remember, it's already broken, and you may not be the first person to have noticed.

[ Parent | on HN ]