In Germany you you cannot inform a website that it has a vulnerability, because in their eyes, vulnerabilities can only be found if you’re intentionally looking for it. Therefore you must be a criminal.
Yep. In germany you might get sued for telling a company “hey your security might endanger peoples data”.
Then again, you might get lawyers sent after you for daring to rate a restaurant low here.
We take our ability to perform badly but still feel very proud very seriously here.
What a stupid law. I can’t actually understand why they would do this because their government helps Interpol all the time so the government is very technologically capable surely they understand the implications of not getting vulnerabilities disclosed like this…
Is it illegal even if the company holds like a contest or something like that?
In Germany you you cannot inform a website that it has a vulnerability, because in their eyes, vulnerabilities can only be found if you’re intentionally looking for it. Therefore you must be a criminal.
Yep. In germany you might get sued for telling a company “hey your security might endanger peoples data”.
Then again, you might get lawyers sent after you for daring to rate a restaurant low here. We take our ability to perform badly but still feel very proud very seriously here.
Was any of this right here correct ? Oh I dunno.
What a stupid law. I can’t actually understand why they would do this because their government helps Interpol all the time so the government is very technologically capable surely they understand the implications of not getting vulnerabilities disclosed like this…
Is it illegal even if the company holds like a contest or something like that?
Wow. Are German websites just full of CVEs all the time?
That’s the beauty of the law - no one knows (except everyone with any expertise, who just won’t admit they know.)