If you knock, and the door swings open, you are still legally prohibited from entering. If you come across such an obvious gaping security hole, a legitimate professional would contact the owner, report the problem, and offer their further services. It is not your right to exploit the problem.

Think of it from the company's point of view...does anyone REALLY know that Lamo isn't doing more or taking something that won't be missed? It is a very common practice for obsessive people to take "mementos" of their conquests. I can't think of a more obsessive behavior than spending days on end casing other people's systems for fun.

I am always suspicious of the practice of "break in then make nice". How can you trust a relationship that begins by the other person violating you? You will never know whether you were just helped...or scammed.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/358/11435#11435