Tag: Web Applications

INSERT Ethics INTO Public Web App Testing

A few of my posts have involved debating the ethics of public web app testing by security professionals. When the good guys poke and prod public web apps it raises a bunch of ethical questions, besides being legally questionable. Rather

Posted in Ethics, Research, Vulnerabilities Tagged with: ,

The Ethics of Probing Web Applications II

Recently, I blogged about the ethical ramifications of hacking websites by security professionals. They probe the sites, discover vulnerabilities, notify the companies, then blog about their exploits. I haven’t decided yet whether or not I consider this an ethical practice

Posted in Ethics, Vulnerabilities Tagged with:

The Ethics of Probing Web Applications

I have observed a trend recently that has me internally debating the ethics of the practice. Security professionals are probing public web sites for vulnerabilities, then going through a “responsible” disclosure process with the owners of the site. Then they

Posted in Dialogue, Ethics, Research, Secure Design, Vulnerabilities Tagged with: ,