New answers tagged

6

Porn sites and advertisements are two business models which often depend on getting the best performance with the fewest costs. HTTPS impacts performance during the initial TLS handshake (can be reduced but not eliminated with session resumption). It also needs more computing resources to encrypt the traffic on the server side and decrypt it on the client ...


0

Porn sites use HTTPS when you log in to your account (if you have one) but why hinder performance sending free videos over https? the only thing there is to hide is what you are searching for on the porn site. If you are watching legal porn then who truly cares about the https? the only thing you risk is a MitM attack but not under a great risk. source: ...


23

Number one rule of penetration testing: don't do it on things that don't belong to you. Yes, it is merely a spider. However, people think wget is a scary hacker tool and the US govt. actually used that in a case. I appreciate that you rectified your mistake, and I think that reflects well on you. You have a few options here, depending on your moral beliefs: ...


5

Well there's a couple of aspects to consider here, as has been said there is no clear answer. On the one hand you've correctly identified the risks of public disclosure with no easy remediation, which is that attackers can take advantage of the issue. However there are also risks with not publicly releasing. For example, it's entirely possible that other ...


4

Ethically, you should be guided by which path does the least damage. That most likely means you should release the information responsibly. Only in a world where you are smarter than everybody else is silence likely to limit damage. My opinion is that releasing the information does the least damage because: You cannot assume that you are the only person ...


0

Even though i never released any research of such importance i put some thoughts into this particular issue every now and then. This is my view on the things: First off: there is no solution / correct answer to this question. By the nature of ethics, it is opinionated. Bugs and security leaks always occur. Software developers try their best to avoid it but ...



Top 50 recent answers are included