PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Legally Blind and Deaf - How Computer Crime Laws Silence Helpful Hackers

hackerone.com | research | #cloud | #hackerone | #cfaa | #advocacy | #dmca | #law-policy
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Computer crime laws like the CFAA and DMCA chill friendly security research, HackerOne argues, urging reform so hackers can report flaws without fear and companies welcome disclosure.
Published
Collected

Related coverage

vulnerability · hackerone.com
Proposed Changes to the Computer Fraud and Abuse Act, Austin Powers, and You
Why proposed CFAA amendments alarm security researchers: expanded language could criminalize routine vulnerability research and testing — HackerOne urges cooperation over prosecution.
research · portswigger.net
Responsible denial of service with web cache poisoning
James Kettle shows how web cache poisoning can take down websites with a single request without collateral damage, earning bounties from Tesla and HackerOne along the way.
research · bishopfox.com
Our Position on the Digital Millennium Copyright Act (DMCA) and the Need to Safeguard Tools for Responsible Security Researchers
Bishop Fox joins peers in cautioning against DMCA Section 1201: broad anti-circumvention language can criminalize good-faith security research and let vendors block inspection and reverse engineering.
research · bishopfox.com
SCOTUS CFAA Ruling: What does it mean for pen testers and security?
The Supreme Court's 6-3 Van Buren ruling narrows the CFAA: 'exceeds authorized access' now turns on gates-up/gates-down boundaries, not EULA fine print, a landmark result for security research.
research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
research · volexity.com
VerdantBamboo: Just Another BRICKSTORM in the Firewall
# VerdantBamboo: Just Another BRICKSTORM in the Firewall June 4, 2026 Damien Cash, Paul Rascagneres, Steven Adair, and Tom Lancaster In September 2025, Volexity conducted an incident response...
Back