So you sit down one day and start chasing a hunch in a popular piece of software and find a huge flaw or exploit. What do you do? This interview with Christopher Soghoian, can help shed some light on the situation.
Although it may look like fun to poke holes in systems used by millions, the process of vulnerability disclosure is often fraught with peril. Lately companies have been suing researchers for violating the US Digital Millennium Copyright Act (DMCA) because they need to reverse-engineer proprietary code. In response, some researchers have foregone notifying vendors altogether and started posting vulnerabilities to public mailing lists.
![[H]ard|Forum](/styles/hardforum/xenforo/logo_dark.png){kind=logo}