Ppl have been accused of crimes for pointing out, in a 100% white-hat way, that a site lets you access other ppl’s accounts just by incrementing a number in the URL. No verification against it.
If someone abuses that maliciously? Sure, go after them. But these were honest security white-hats trying to warn, before scammers exploited it.
To be fair, being accused for that is exceptional, not normal. But it has happened. More than once!
Ppl have been accused of crimes for pointing out, in a 100% white-hat way, that a site lets you access other ppl’s accounts just by incrementing a number in the URL. No verification against it.
If someone abuses that maliciously? Sure, go after them. But these were honest security white-hats trying to warn, before scammers exploited it.
To be fair, being accused for that is exceptional, not normal. But it has happened. More than once!