Like RFP already done, it is a right time to protect your privacy and consider posting messages anonymously.

By the way, what would you suggest Lamo to do when he discovered the vulnerabilities of the Times network ? Should he just have posted an anonymous message on BUGTRAQ or other security newsgroup, the vulnerability could be confirmed by other security vendor/consultant. Nobody would think of the breach of the law then. Sounds like - don't reveal your name until you consult with your lawyer !

You'd rather don't joke with big players.

Nobody out there are ready to get to know their security measures were merely illusions. Sure, crackers usually don't joke too, but they got no intentions to let you know you are vulnerable.

What FBI could do indeed but teach Lamo white hat ethics and discovered vulnerability reporting (if they are aware of) to be protected of such allegations in the future.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/6888/22104#22104