But he is putting innocents at risk.
That's why in my jurisdiction you can get fined up to 2000 Euros for that (a realistic amount is a low double-digit amount -- if nothing further happens, of course).
back
1 comments
Nope, Yahoo is putting innocents at risk for having the bug in the first place - the bug/risk/threat was there (and possibly known by blackhats) before the finding. It's the duty of Yahoo to find and fix issues with data that is entrusted to Yahoo - they can try to find everything themselves, or they can pay others to do it instead.