71–74 of 74 posts
Earlier quoted context omitted.
Are there really people in this community who don't know this?
I've heard the phrase "white hat" used frequently to describe hackers. I've never heard the phrase "white hacker". About 526,000 results http://www.google.com/#hl=en&q=%22white+hat%22+hacker About 65,000 results http://www.google.com/search?hl=en&q=%22white%20hacker%22
Earlier quoted context omitted.
It appears he wants to publish the vulnerability (might be a novice security researcher) without getting sued.
He is very, very unlikely to be sued provided that (i) he didn't explicitly agree to a contract forbidding security research when he acquired the application, (ii) he acquired the application lawfully, (iii) he at no point solicited business from the vendor of the application, (iv) he didn't exploit the vulnerability in any way that could be construed as having caused direct damages to the vendor, and (v) he is scrup…
For example, it is fine to take someone else's commercial web app, install it on your own server, and beat it up.
Earlier quoted context omitted.
He is very, very unlikely to be sued provided that (i) he didn't explicitly agree to a contract forbidding security research when he acquired the application, (ii) he acquired the application lawfully, (iii) he at no point solicited business from the vendor of the application, (iv) he didn't exploit the vulnerability in any way that could be construed as having caused direct damages to the vendor, and (v) he is scrup…
I would adjust "other people's web applications" to be "in other people's deployments." For example, it is fine to take someone else's commercial web app, install it on your own server, and beat it up.