White hat helping, think you would get in trouble?

[Glickman]

i was curious, do you think, say, cvs, or some other big company would get mad if you found an exploit, say, a username and password, and reported the weakness to them?

for the fact that you were snooping in the first place?

[Kevmaster]

are you an employee? probably

if not? unlikely

[Glickman]

nope, in fact i have bunch of them from playing around, i was thinking that if i reported though they might figure im being malicious

of course i'd use a proxy, but i just dunno if its worth it


the thing is this technique i use is so easy anyone could do it, so i dont want to see some kiddie go around messing with the 300 plus sites i see vulnerable giving us "advanced" computer users an even worse name

[Kai]

It's not.

Weigh the pros and cons.


Do you really care if CVS has a secure system?

[Glickman]

It's not.

Weigh the pros and cons.


Do you really care if CVS has a secure system?

oh hell no, actually i hate them, but i also see colleges and many private businesses


well.. except for some more "personal" sites, those could be sold off to the highest bidder