by r-ID on Fri Jul 08, 2011 7:27 pm
([msg=59583]see Re: How to notify someone of a vulnerability.[/msg])
If you hack without permission, your actions might be interpreted as illegal activities, even if you mean no harm. I recommend to hack without permission (avoid any potential damage), hide your ass and email about the problem. Minimum damage, maximum learning (most important part) and medium safety. Asking permission decreases learning process, harder hack increases damage (and safety) and hiding your ass is just for insurance.
If you don't wanna take any risks you could always ask for permission and maybe to get some $ too, but learning process might not be that good, asking for permission takes some time and you don't have all the freedom like choosing any target etc.