360
A researcher bought noreply.net. Companies started sending him secrets. (arstechnica.com)
submitted 3 months ago by to c/nottheonion@lemmy.world
60 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[+] -27 points 3 months ago (9 children)

What started out as a personal email project has become a large-scale effort to warn businesses and other groups that they have misconfigured their internal systems and are accidentally sharing sensitive information.

Traitor...

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 9 child comments
    •
  • [–] 54 points 3 months ago (3 children)

    ...

    If a corp is sending your personal information to random email addresses, it is in your best interest for them to stop.

    This person, is trying to get corps to stop, because it's bad for people.

    They are not trying to save corps at the expense of people, which is what you seem to think is happening

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 0 points 2 months ago* (last edited 2 months ago) (2 children)

    If you quietly contract the company, they work to mitigate corporate liability, any benefit to you as user is unintentional. Say it loud and publicly and you empower users to start cleaning up the mess created by company and company gets public shame and pressure to actually fix. Literally no reason to quietly appeal to companies first, both are covered if you go public first

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 2 months ago (1 child)

    Welp, I feel any future attempt to explain something to you will work out the same...

    And I'm not signing up for that hassle and frustration

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 2 months ago

    We're all so lucky to have had the brief moment with you that we did. We're all devastated by the loss of your future gifts.

    BTW, it's fine if you bypass the overly dramatic gesture next time and just say, "my mom is home and I don't want my chicken nuggets to get cold, so I'm going to go now. Bye bye."

  • permalink
  • fedilink
  • source
  • parent
  • [–] 16 points 3 months ago (3 children)

    Please explain your reasoning for calling him a traitor.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 0 points 2 months ago* (2 children)

    Because it's not an accident. And he's quietly going to the businesses first to try to let them internally address and attempt to cover up and only going public as a last resort.

    As a person, and not a business, his loyalty should be to people. The bully only responds to sunlight.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 0 points 2 months ago (1 child)

    You do realize that by telling companies they have vulnerabilities, they're protecting the people whose information they store, right?

    Do you really want him publicly releasing vulnerabilities so the company gets hacked?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 0 points 2 months ago

    You do realize that you can't go 2 days in modern world without hearing about a giant sensitive dataset being exposed. So yes, more sunlight is needed for any chance of meaningful change These companies can choose to staff up and prioritize sarety, because they don't do that now obviously. They don't give a shit and it shows. And they don't really have to as long as well meaning folks politely do that work for them free of charge - not the IT work, the PR work of sweeping their misdeeds under the rug.

  • permalink
  • fedilink
  • source
  • parent
    • load more comments (1 reply)