In Germany you you cannot inform a website that it has a vulnerability, because in their eyes, vulnerabilities can only be found if you’re intentionally looking for it. Therefore you must be a criminal.
Yep. In germany you might get sued for telling a company “hey your security might endanger peoples data”.
Then again, you might get lawyers sent after you for daring to rate a restaurant low here.
We take our ability to perform badly but still feel very proud very seriously here.
@[email protected]@[email protected] How ridiculous😂. and china have the same thing: amateur radio enthusiasts (Usually called HAM) can’t even report the illegal occupation of non-amateur frequency bands, because the law also prohibits them from listening to non-amateur frequency bands, which means that once they report such illegal acts, it proves that they have listened, which is also illegal.
What a stupid law. I can’t actually understand why they would do this because their government helps Interpol all the time so the government is very technologically capable surely they understand the implications of not getting vulnerabilities disclosed like this…
Is it illegal even if the company holds like a contest or something like that?
In Germany you you cannot inform a website that it has a vulnerability, because in their eyes, vulnerabilities can only be found if you’re intentionally looking for it. Therefore you must be a criminal.
Yep. In germany you might get sued for telling a company “hey your security might endanger peoples data”.
Then again, you might get lawyers sent after you for daring to rate a restaurant low here. We take our ability to perform badly but still feel very proud very seriously here.
Was any of this right here correct ? Oh I dunno.
@[email protected] @[email protected] How ridiculous😂. and china have the same thing: amateur radio enthusiasts (Usually called HAM) can’t even report the illegal occupation of non-amateur frequency bands, because the law also prohibits them from listening to non-amateur frequency bands, which means that once they report such illegal acts, it proves that they have listened, which is also illegal.
What a stupid law. I can’t actually understand why they would do this because their government helps Interpol all the time so the government is very technologically capable surely they understand the implications of not getting vulnerabilities disclosed like this…
Is it illegal even if the company holds like a contest or something like that?
Wow. Are German websites just full of CVEs all the time?
That’s the beauty of the law - no one knows (except everyone with any expertise, who just won’t admit they know.)