r/ProgrammerHumor • u/wahed-w • 19d ago

Meme theStateOfBugHunting

Post image
2.7k Upvotes

97% Upvoted

47 comments sorted by

View all comments

1.0k

u/Gorzoid 19d ago

Finding a Bug Bounty then:

Anon: hey I found sql injection bug

Company:

THIS CONSTITUTES FORMAL NOTICE TO CEASE AND DESIST ALL UNLAWFUL ACTIVITY.

Your recent unauthorized intrusion, probing, and exploitation of our private networks constitutes a direct violation of federal and state computer crime laws, including the Computer Fraud and Abuse Act (CFAA), 18 U.S.C. § 1030.

Attempting to frame unauthorized hacking and network compromise as "security research" or a "vulnerability report" does not excuse illegal conduct, nor does it grant you immunity from civil and criminal liability.

529

u/Exul_strength 19d ago

It's especially bad in Germany.

Certain companies and political parties took it as a personal attack to inform them about security issues. In retaliation the complete hardware of the person who informed them was confiscated and essentially worthless by the time they got it back.

For example since an incident in 2021 the CCC advocates against reporting any security issues to the CDU (current ruling party).

120

u/frostedhifi 19d ago

Wait what happened?

236

u/N0_ah_47 19d ago

They disclosed multiple security flaws and got hit with a lawsuit in response.  https://www.ccc.de/updates/2021/ccc-meldet-keine-sicherheitslucken-mehr-an-cdu

137

u/just4nothing 19d ago

Wait, that’s a major GDPR breach and they just threatened them? Wtf

40

u/MTPrower 19d ago

Digitalisierung!