All Questions
Tagged with legal disclosure
8 questions
2
votes
2
answers
331
views
Contacting customers of vulnerable software, is it wrong?
Say you're a security researcher who finds vulnerabilities and reports them to vendors to try and receive a bug bounty. If the vendor is not willing to pay any bounty for any vulnerability, you simply ...
- 579
10
votes
1
answer
517
views
How to legally blog about Windows internals
In the field of malware analysis and reverse engineering, many job postings call for familiarity with the PE file format, Windows internals, etc. However, Microsoft presumably doesn't want people ...
- 305
54
votes
8
answers
5k
views
How should I tell school that they are vulnerable when I wasn't given permission to check? [duplicate]
I would like to report security weaknesses to my school in UK. I had managed to find security weaknesses without any exploits or other software or hardware.
I had look at similar question however ...
- 3,843
32
votes
8
answers
8k
views
Is it legal to find bugs on a website and report them to the website's owner? [closed]
I'm from Canada, and I'd like to know one thing. I know a bug on one website. I'm not sure if it's legal here to search for bugs on a website and NOT use them; instead, tell its company about it.
- 447
7
votes
3
answers
11k
views
attack/abuse notification email template
I'm building a template for use when sending "abuse" notifications to ISPs, hosting providers, etc., for when attacks originate from their netblock.
Are there examples of templates used for this ...
- 83.8k
18
votes
2
answers
1k
views
How to handle security issues of someone else's website
A few weeks ago I found that someone has posted admin account details for a certain website on a public wiki by mistake. As I found that data to be real (i.e. I could log into their website run by ...
- 285
5
votes
6
answers
3k
views
What might be the legal and policy consequences of traffic sniffing?
I found a security hole in an organisation in the UK with many employees. Login form sends user name and password in clear text to the public facing IP via HTTP. Initially I pointed this to IT but ...
- 53
4
votes
4
answers
1k
views
What particular concerns should one bear in mind when wardriving?
I'm considering starting a neighborhood-wide wardrive, with the objective of raising awareness to the risks of running unsecured wireless networks.
Right now, I'm still in the planning stages of this ...
- 27.2k