Live data from Hacker News

"White hat" Facebook hacker gets 8 months in jail

bbc.co.uk

101–110 of 120 posts

Re: "White hat" Facebook hacker gets 8 months in jail

#101
"Sentencing Mangham, Judge Alistair McCreath said his actions could have been "utterly disastrous" for Facebook."

So what?? Facebook isn't a British business; why should british judical system should care that much? Even if he was that guilty.

Countries should totally quit being unpaid prostitutes to foreign companies.

Re: "White hat" Facebook hacker gets 8 months in jail

#102
post #26

Earlier quoted context omitted.

Upvoted. Never, ever, talk to the cops.

Upvoted too because I preach this to friends/family regularly for serious issues/offenses. However I've talked my way out of around 9 out of 12 speeding fines in various states by being nice and kissing a bit of ass during the last decade. Cops are people too and when they walk up to your window after pulling you over, they may actually be scared. And you know fear leads to anger, anger leads to hate, hate leads to y…

I live in a large city where speed traps are common. Good luck talking your way out of speeding tickets in those circumstances. Here warnings are very, very uncommon.

Re: "White hat" Facebook hacker gets 8 months in jail

#103
post #65

I manage Facebook's Whitehat program ( https://www.facebook.com/whitehat ). We have taken an incredibly open stance towards security researchers and welcome the contributions they make towards securing the internet. Our policy towards this research is documented quite succinctly: "If you give us a reasonable time to respond to your report before making any information public and make a good faith effort to avoid priv…

As an infosec professional myself, I applaud you for the stance you take. Offering a public bug bounty is an excellent way to allow researchers to conduct their experiments in an ethical fashion while protecting all parties involved.

At first glance at the article, it seemed that Facebook may have reneged on its offer of protection, but based on your explanation, it now seems that the hacker was indeed malicious, and only used the "white hat defense" as a shield.

I'm a huge advocate of ethical and responsible disclosure, so kudos to you for encouraging it where appropriate.

Re: "White hat" Facebook hacker gets 8 months in jail

#104
post #97
post #85

Earlier quoted context omitted.

Just to reiterate, it really hurts to see so many people saying "have your ID ready". From the very moment an officer pulls you over they will be anxiously watching your every move, hoping you're not the next one that attempts to pull a gun on them. Reaching for anything when pulled over is the absolute worst thing you can do to an officer no matter how innocuous you may think you seem. Please, just keep your hands o…

Well, that's in the US. Fortunately, a lot of people live in countries where you can do whatever when stopped and the officer will never suspect you are trying to pull a gun on them, or pull a gun on you. That's because, in those countries, it NEVER happens (i.e for someone pulled over to shoot the cop). So you can go get your ID or whatever, and then you have a chat, and they maybe give you a fine for speeding or wh…

The cops here don't even carry guns on their person. If you draw one on them, they will retreat to a safe distance, get out the guns from the trunk of the radio car, and keep an eye on you until the cavalry arrives.

Re: "White hat" Facebook hacker gets 8 months in jail

#105
post #22

> "He added that when Mangham was arrested he made "copious" admissions to police about what he had done." Given the chance, I always bang the "don't talk to authorities" drum. So now you have to wonder, how did his "copious admissions" help him? Seriously, if you are suspected of anything , no matter how innocuous or momentous: Shut. The. Hell. Up. Get a damned attorney. Of course the classic video needs to be linke…

omg, Saul Goodman :-) great video, thanks!

Re: "White hat" Facebook hacker gets 8 months in jail

#106
Facebook you suck.

This hacker should be awarded for finding flaws in facebook that could be misused by people who really wanted to do harm. If this hacker didnt find these flaws facebook would haver never known that they have a security flaw.

Even better: Facebook should hire this guy! He managed to break into a system that is developer by the "top notch" facebook engineers.

Get him out of prison!

Re: "White hat" Facebook hacker gets 8 months in jail

#107
post #92
post #78

Earlier quoted context omitted.

Even sacrificing lambs is useful - with time, the bigger fish will find very hard to get enough sacrificial lambs and the lambs themselves may start demanding larger rewards for their sacrifice. Wondering if lamb fat is good to fry large fish.

No, it's very gamey; a very little bit goes a long way, even in lamb dishes.

:-)

Re: "White hat" Facebook hacker gets 8 months in jail

#108
post #106

Facebook you suck. This hacker should be awarded for finding flaws in facebook that could be misused by people who really wanted to do harm. If this hacker didnt find these flaws facebook would haver never known that they have a security flaw. Even better: Facebook should hire this guy! He managed to break into a system that is developer by the "top notch" facebook engineers. Get him out of prison!

There seems to be no evidence to support his allegations he was going to properly disclose his exploits to Facebook. OTOH, there is evidence he misappropriated data and deleted information that could be used to track him.

His hat is not impeccable white.

Re: "White hat" Facebook hacker gets 8 months in jail

#109
post #98
post #58

Earlier quoted context omitted.

In Britain (where this case was tried), the law is different. If you don't mention facts that you will rely upon in court, it can harm your defense. Shutting up is not as much of an option: http://en.wikipedia.org/wiki/Miranda_warning#England_and_Wal...

"You do not have to say anything unless you wish to do so, but I must warn you that if you fail to mention any fact which you rely on in your defence in court, your failure to take this opportunity to mention it may be treated in court as supporting any relevant evidence against you" F.U.D. made law. Well done England. Fortunately England still requires a Jury, and Jury's still acquit people despite the police and pr…

Just a quick note: If you don't have a solicitor or your solicitor is not available you're in even more shit as they'll get the "duty solicitor" out.

They are their own breed of scum you have to avoid like the plague as they sleep, eat and drink with the arresting officers and are definitely not impartial. Actually that is pretty much the same for most of the legal profession in the UK. Half of them are friends, the other go to the same masonic lodges - fine example at [1]

The UK is 100% guilty until proven innocent.

As for trial by Jury - seriously speaking they are usually manned by idiots most of the time.

[1] http://www.independent.co.uk/news/uk/this-britain/police-def...

Re: "White hat" Facebook hacker gets 8 months in jail

#110
post #65

I manage Facebook's Whitehat program ( https://www.facebook.com/whitehat ). We have taken an incredibly open stance towards security researchers and welcome the contributions they make towards securing the internet. Our policy towards this research is documented quite succinctly: "If you give us a reasonable time to respond to your report before making any information public and make a good faith effort to avoid priv…

Now the big questions:

Are you the law?

Should you make your own rules?

Should you have your own court?

Because that's how you are operating.

You made your own law and tempted people to break "common law". Double standards.

Post reply on HN