Wednesday, February 02, 2011

Why unsolicited reporting of vulnerabilities is a bad idea

Almost all young hackers come at some point of their hacker-life to the conclusion that finding and unsolicited reporting of vulnerabilities would be a fine idea:

The owner of the website might be thankful or even hire the young hacker to check the site further or fix the vulnerabilities.

Almost everyone in the IT-Sec-Business I know had this idea - and most of us learned the more or less hard way, that it is in fact a bad one. Not all potential customers are nice people. And be honest: Would you really hire someone who did an unsolicited hack of your infrastructure?

Some "IT-Sec-Professionals" take longer to learn their lessons - I remembered my own experiences when I read about Chris Russo and his plentyoffish-hack.

In my opinion both partys made mistakes and are leaving a really bad impression in this case. Maybe something to learn from, regardless on which side of the net you work?

Some of the comments over at slashdot http://slashdot.org/story/11/01/31/1856202/PlentyofFish-Hacked-Founder-Emails-Hackers-Mom are worth reading.

tom

13 comments:

Voyance sérieuse par telephone said...

Thank you first of all for this great blog. I come every day including week end! Good luck.

Voyante gratuite par mail

voyance par mail gratuite said...

You clearly know so much about the subject, you’ve covered so many bases.
Great stuff from this part of the internet. Again, thank you for this blog.

voyance gratuite said...

Congratulations to the site it is very nice to be more interactive and more originale.De it has a lot of content and links.

lin said...

I'm not going in originality but your blog is so good you can not say anything other than THANK YOU!
voyance gratuite par mail

voyance par mail said...

This blog is so nice to me. I will continue to come here again and again
Good luck

voyance serieuse gratuite said...

Your blog is really great, I come over every day and each time I find something that suits me

viajes en marruecos said...

It's awesome! Keep sharing.

voyance gratuite en ligne par mail said...

Bravo pour ce superbe travail !!!

Viajes en Marruecos said...

You have made many great points here.
Tour from Marrakech To Merzouga
Week-end marrakech

voyance Email said...


Grâce à vous, j'ai pu apprendre beaucoup de choses intéressantes. J'espère en apprendre encore.

Unknown said...


j ai passé un bon moments et j en ai eue plein les yeux!!!
voyance par mail gratuit

rosy123 said...


Votre blog est simplement génial. J'y ai découvert de superbes images, signatures, citations. Je ne ma lasse pas de le regarder.
voyance mail gratuit

rosy123 said...

Un petit pour vous dire que votre blog est super!
voyance par mail gratuit en ligne