Whistleblowing 101
summary
Shows a concrete case where an online promo game leaks answers — an XHR "word" header in plaintext that students auto-filled with a script, then reported and were excluded; explains Article 138b computer trespassing (punishable) and why downloading stolen databases is dangerous; lays out step‑by‑step responsible disclosure actions (what to record, who to email, don’t share details) and cites the diginotar certificate breach as what secrecy costs; practical legal risks and a checklist for reporting are given.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:46What to expect from this talk
- 5:00Why whistleblowing matters
- 9:33Security flaw case study
- 11:22Three Ds of whistleblowing
- 14:15Legal assessment
- 25:30Debating whether to report a discovery
- 34:14Disclosure decision
- 37:50Responsible disclosure
- 41:00Proper vulnerability disclosure
- 44:15Three Ds summary
- 46:51Q&A
related talks
40mPanel: Responsible Disclosure And (Legal) Risks For Security Researchers
01h 24mCode Red: Navigating the Minefield of Security Programming Blunders
31mDishonest Software: Fighting Back Against the Industry Norms
58mSocial Engineering: Hacking Humans
51mHackers, Journalists and the Ethical Swamp
25mEverything Old Is New Again: Legal Restrictions on...
59mInside the Breach: Secrets Exposed
01h 00mWhat Was I Thinking?: Bungled Breach Responses