Hacker News Reader

[flagged]

Maybe a grey hat should scan for all the vulnerable servers they can find, exploit them, and then patch them.

That's the definition of a White Hat to me.

If there was a well known company, TrustedExploitAndPatch Inc, that had faces and contact info and dropped an 'oh by the way.txt' file with the details, screen recording, etc. after patching showing they didn't exfil all the coins - would people be happy?

Even if someone finds your wallet and returns it, full of its original cash, they still would have had time to snag your credit card numbers, figure out your address, what coupons you have.

The alternative is a guy in a suit walking up and saying "I saw your wallet in the bushes on 144th and 132nd."

- please stop spamming this

- but anyone who deploys thousands of lines of vibe-coded C that implements a transforming HTTP proxy from scratch instead of a patch (hey, it “might even be safer than the patch”!) deserves what they get

edit: shocker https://news.ycombinator.com/item?id=50199456

Instead of what patch? I just said this is for those who have NO PATCH AVAILABLE. I guess you need the strawman to make a valid point, though…

Reply on news.ycombinator.com