logoalt Hacker News

jacquesm • yesterday at 9:15 PM • 1 reply • view on HN

Yes, would you like the report to be what you need to know or a report that will cause you to have to report an actual breach rather than just a vulnerability? Because that is what this is.


Replies

cgio • yesterday at 9:38 PM

How does that relate to e.g. have I been pwnd? If the obligation to be a white hat is to protect the owners of the information then is it not also to inform the persons who have been impacted a valid white hat activity? From my perspective the classification of someone as a black hat should be if they use it for something malicious. And if anything disclosure limits any potential use. On the other hand our big LLM companies Hoover over everything, have access to it, occasionally go rogue with their knowledge and access, but I don’t see many people calling them black hats.

➕ show 1 reply