Timeline for Found security vulnerability, what should I do? [duplicate]
Current License: CC BY-SA 3.0
14 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 22, 2017 at 11:49 | history | edited | Bob Ortiz | CC BY-SA 3.0 | edited title |
| Mar 17, 2017 at 13:14 | history | edited | CommunityBot | replaced http://security.stackexchange.com/ with https://security.stackexchange.com/ | |
| Jan 2, 2016 at 2:46 | history | edited | noob | CC BY-SA 3.0 | Improved question |
| Jan 2, 2016 at 2:35 | history | edited | noob | CC BY-SA 3.0 | Improved question |
| Apr 19, 2012 at 18:33 | history | edited | CommunityBot | insert duplicate link | |
| Apr 19, 2012 at 18:33 | history | closed | Scott Pack AviD♦ | exact duplicate | |
| Apr 19, 2012 at 18:29 | history | edited | AviD♦ | edited tags | |
| Apr 14, 2012 at 23:06 | history | tweeted | twitter.com/#!/StackSecurity/status/191301517914025984 | ||
| Apr 14, 2012 at 19:34 | comment | added | Fiasco Labs | I rattled the doorknob and found the door was unlocked. Should I go in and take the valuable item I saw when the door opened a crack and notify my buddies I found an unlocked door? Or will I lock the door if possible and notify the owner? Moral dilemmas in a pass/fail situation. | |
| Apr 14, 2012 at 18:46 | vote | accept | noob | ||
| Apr 14, 2012 at 18:26 | answer | added | D.W. | timeline score: 20 | |
| Apr 14, 2012 at 17:47 | comment | added | Christopher Creutzig | I'd guess that in most countries, it would be a very bad idea to either exploit such a bug or threaten to. Of course, there might be companies where you can get a “consulting fee” under such circumstances and it seems there is also a black market for this kind of information, but as with any black market, I personally would stay away from that; most people would consider just sending a (complimentary) description to the IT department the morally right thing to do – and if they don't fix it in half a year, send the description on bugtraq. | |
| Apr 14, 2012 at 17:42 | comment | added | Scott Pack | I would recommend looking at security.stackexchange.com/q/807/618 and security.stackexchange.com/q/52/33 | |
| Apr 14, 2012 at 17:17 | history | asked | noob | CC BY-SA 3.0 |