Many children think it's smart to break into a computer resource, modify a file to say they were in, and then report it to the necessary authorities.

This is not how it should be done.

When I was in community college, I notified the sysadmin via email about two present vulnerabilities, included the source code to the scripts, and waited for his reply. The next day, he emailed me back to thank me, and said everyone was patched that night.

I'm glad I did it the nice way and avoided 2 years or probation.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/432/1742#1742