18yo arrested for reporting a bug in the new Budapest e-Ticket system
1–10 of 329 posts
Re: 18yo arrested for reporting a bug in the new Budapest e-Ticket system
#2"this outrageous move from the police brought about fierce reaction resulting in tens of thousands of 1-star reviews on the facebook pages of the companies involved"
In the old days, protesters used to physically go and picket in front of company offices. These days, protesters leave one-star reviews. I wonder which is more effective.
Re: 18yo arrested for reporting a bug in the new Budapest e-Ticket system
#3[deleted]
Re: 18yo arrested for reporting a bug in the new Budapest e-Ticket system
#4Side note: this page gives me the weirdest Firefox behaviour I've ever seen: https://gfycat.com/HandyRapidJabiru
Re: 18yo arrested for reporting a bug in the new Budapest e-Ticket system
#5That's how the DMCA works. Remember the guy who gave a talk about Adobe's PDF creator which purported to produce "secure" documents (required a password) but the feature was easily bypassed.
Adobe had him arrested the day after he gave his talk.
Link to a Wired article here: https://www.google.com/amp/s/www.wired.com/2001/07/russian-a...
EDIT: I have a terrible memory-- thanks to the folks who replied to my comment with corrections.
Re: 18yo arrested for reporting a bug in the new Budapest e-Ticket system
#6That's how the DMCA works. Remember the guy who gave a talk about Adobe's PDF creator which purported to produce "secure" documents (required a password) but the feature was easily bypassed. Adobe had him arrested the day after he gave his talk. Link to a Wired article here: https://www.google.com/amp/s/www.wired.com/2001/07/russian-a... EDIT: I have a terrible memory-- thanks to the folks who replied to my comment w…
This story takes place in Hungary.
Re: 18yo arrested for reporting a bug in the new Budapest e-Ticket system
#7I remember coming across a serious bug in a site that belonged to a top multi-billion company. My brother also found what essentially an unrestricted privacy leak (and possibly editing access) in a top university (leaked data is sensitive personal information, not academic). Neither of us reported (or exploited) what we found.
Protection from this kind of blame-shifting and misdirected retaliation should be guaranteed by law. Until it is, bugs in critical and important infrastructure will go on unreported, and remain available for malicious actors to exploit.
Re: 18yo arrested for reporting a bug in the new Budapest e-Ticket system
#8"this outrageous move from the police brought about fierce reaction resulting in tens of thousands of 1-star reviews on the facebook pages of the companies involved" In the old days, protesters used to physically go and picket in front of company offices. These days, protesters leave one-star reviews. I wonder which is more effective.
People can, and do, do both things.
Re: 18yo arrested for reporting a bug in the new Budapest e-Ticket system
#9"this outrageous move from the police brought about fierce reaction resulting in tens of thousands of 1-star reviews on the facebook pages of the companies involved" In the old days, protesters used to physically go and picket in front of company offices. These days, protesters leave one-star reviews. I wonder which is more effective.
Yep, a few people were frowning, especially since the democracy is in pretty bad shape in Hungary right know. However, in this case it works: it will be seen and remembered longer this way. Also, there were quite heated discussions on facebook, the case received a lot of attention even from non-tech people, the guy will be represented by the lawyers of a human rights association, etc.
And actually there will be a protest in front of the office of the Public Transport Authority tomorrow. But I think in this case, the online petitioning worked pretty well.
Re: 18yo arrested for reporting a bug in the new Budapest e-Ticket system
#10When I was in Budapest a few weeks ago, I heard from multiple locals that the metro system was owned by some sort of mafia. I wonder if that explains the subpar security and overreaction to the bug report.
edit: a few weeks ago, not this past summer that is still occurring