Hot answers tagged

7

Gaining access to a computer system without the consent of the owner is a violation of law in most countries (if not all of them). If it is your future employer, then I would guess it shows that you can not be trusted with confidentiality, on top of it being illegal. Please don't do it. If you want to show off your skill, then offer to take a test or get ...


4

Lists of known-compromised secrets are very valuable to people who are trying to make systems more secure, especially for things like passwords or password-equivalent credentials. Consider Troy Hunt's excellent "Pwned Passwords" page, which is built using a massive corpus of compromised passwords (and you can download it, if you want to, and also download ...


3

The way I see it: Hacker: the most generic term for people who "hack", that is, try to do things that go beyond what is apparently possible, usually by studying, researching, testing, and also having fun. It can have negative or positive connotations, applying to people ranging from good programmers to true criminals. Ethical hacker: a hacker that does not ...


3

How people can say that Ethical hacking is good and Cracking is not good or illegal. You have it backwards. People say that legal hacking is called "ethical hacking", and people say that illegal hacking is called "cracking", in an attempt to distinguish between two different uses of the same tools and techniques. Permission is the difference. In the ...


2

I would certainly let the site owners know if possible. This looks like a GDPR breach of the other website. First and foremost, their breach, their primary responsibility. You are now responsible for not allowing any personal data (if you have any) to go any further. Although you would probably want to just delete it unless it becomes necessary for ...


1

Great question. This is definitely a grey area. If the secrets don't have user names associated or other PII, you are probably ok. Typically, you should notify the sites (or specific accounts/users) of the data leakage. Then, depending on which ethical disclosure system you use, they get a certain amount of time (six weeks is common) to remediate. After ...


Only top voted, non community-wiki answers of a minimum length are eligible