Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Well, if you found a bug that allowed you to log into someone else's bank account and remit all their money to your own account, would exploiting it be right?


Wouldn't it be more like finding a bug that allows you to transfer more money than the actual amount that gets withdrawn from your bank balance?

E.g. put in a transfer order for $10. Use bug to actually transfer $2000, but your balance is only credited for the $10.


The OP's argument is that exploiting a bug for financial gain is not wrong which is not so different from saying exploiting a faulty lock to steal is the locksmith's fault.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: