Live data from Hacker News

Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

news.ycombinator.com

21–30 of 48 posts

Re: Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#21
post #19

Call the bank's regional HQs. Ask to speak with the manager of security. Report the instance. Ask for his/her name and number. Tell the individual you plan to go public with the information in 48 hours if there's no resolution. The individual will feel a career risk and act accordingly.

Bold. Love it!

Re: Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#22
post #4

apply for a job with the bank

In 2016 I've found that this strategy — "hey, I found a really bad security thing, and a pattern of really bad security things" or "hey, I did something 100x better than what you're doing and people know it, here's my stuff, let's join forces" — doesn't work like it used to.

In fact, any advice often falls on deaf ears and feels like pandering.

I'm looking at you (however among many others), YC's favorite payment processor.

Re: Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#23
I have to ask the folks here. Given the OP used an ID that seems easily traceable and he/she admits to defrauding the bank publicly (I know, just .32 USD, but still people are going to prison these days for so many silly things). Should OP retain legal counsel and have the lawyer make contact with a VP?

Or does lawyer-ing up make OP look guilty from the start?

Re: Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#24
Stop.

You're risking your freedom to save a corporation.

If you press ahead you will be dealing with people who lack knowledge and are scared of what you did affecting their career. They will rake you over coals. And you will have gained what? The minute pleasure of helping them save a few bucks?

You have a desire to help people. That's great and noble and commendable. But that's not what you would be doing here.

My advice: drop it. It's not worth it. If there was no risk to life or liberty from what you found, then yes chase the disclosure. But there isn't. Drop it and forget it ever happened. Your life is worth it.

Re: Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#25

I have to ask the folks here. Given the OP used an ID that seems easily traceable and he/she admits to defrauding the bank publicly (I know, just .32 USD, but still people are going to prison these days for so many silly things). Should OP retain legal counsel and have the lawyer make contact with a VP? Or does lawyer-ing up make OP look guilty from the start?

Well, there are audio recordings of bank staff asking to demonstrate the flaw and there are also recordings of the same staff telling me that going public is within my rights, but they don't seem to understand the underlying issue.

Not sure about lawyering up, maybe it's something that I should do (should have done?)..

Re: Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#26

I have to ask the folks here. Given the OP used an ID that seems easily traceable and he/she admits to defrauding the bank publicly (I know, just .32 USD, but still people are going to prison these days for so many silly things). Should OP retain legal counsel and have the lawyer make contact with a VP? Or does lawyer-ing up make OP look guilty from the start?

Well, there are audio recordings of bank staff asking to demonstrate the flaw and there are also recordings of the same staff telling me that going public is within my rights, but they don't seem to understand the underlying issue. Not sure about lawyering up, maybe it's something that I should do (should have done?)..

IANAL, but I thought I would mention it anyway. Do you have these recordings for safe keeping?

Re: Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#27

Earlier quoted context omitted.

Well, there are audio recordings of bank staff asking to demonstrate the flaw and there are also recordings of the same staff telling me that going public is within my rights, but they don't seem to understand the underlying issue. Not sure about lawyering up, maybe it's something that I should do (should have done?)..

IANAL, but I thought I would mention it anyway. Do you have these recordings for safe keeping?

Some places, yes. But you're right, definitely. Better safe than sorry!

Re: Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#28

Earlier quoted context omitted.

IANAL, but I thought I would mention it anyway. Do you have these recordings for safe keeping?

Some places, yes. But you're right, definitely. Better safe than sorry!

One more idea. I once witnessed another company being shown a competing companies unreleased product while testing my own product in a testing facility. I send them an unmarked envelope with a letter of what I saw and the names of the people involved (as they were wearing name tags). This is stone-age now, but perhaps it might help.
Post reply on HN