Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Security pro pleads guilty to USC breach
Robert Lemos, SecurityFocus 2006-09-06

Security professional Eric McCarty plead guilty in United States District Court in Los Angeles on Tuesday, admitting that he intentionally exploited a flaw in the online student application Web site of the University of Southern California, federal prosecutors said.

Comments Mode:
Security pro pleads guilty to USC breach 2006-09-07
John Delance (1 replies)
Filling in the data leaks... 2006-09-07
mroonie
Security pro pleads guilty to USC breach 2006-09-07
ChrisG (1 replies)
I'll agree with Mr. Maiffret that while what McCarty did was not the right thing to do, punishing people who let people know about a vulnerability after they exploited the vulnerability will only succeed in people not telling anyone about that vulnerability (or at least not the organization or vendor)

its pretty sad when not reporting something gets you in less trouble than reporting a problem...

good job catching that "evil hacker" who reported the problem himself, sheeesh.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11411/34066#34066
Re: Security pro pleads guilty to USC breach 2006-09-24
Sort of Anonymous (1 replies)







 

Privacy Statement
Copyright 2008, SecurityFocus