Duty of care dilemma when reporting Web vulnerabilities to both Stakeholders and Web Service ownerIs it “wrong” to copy a photo from an article (with photographers name and link to article) on the web and tweet it?Which country's laws apply to buying/selling illegal items? Buyer, seller or owner of the service?Actionability of web site terms of serviceWhen is making and selling “snake oil” illegal?Child Custody : Cases supporting Father as primary care giver or shared care and controlHow do I file a certificate of service when making a money claim online?Does a parent have any heightened duty of care to a grown child?Which country's law applies when scraping / crawling web pages?Does my employer have to pay redundancy when my contract takes me over two years service?Removing negligent care clause from service agreement

Need help identifying/translating a plaque in Tangier, Morocco

Does it makes sense to buy a cycle to learn riding?

How would photo IDs work for shapeshifters?

Why did the Germans forbid the possession of pet pigeons in Rostov-on-Don in 1941?

What do the Banks children have against barley water?

What does "enim et" mean?

Landlord wants to switch my lease to a "Land contract" to "get back at the city"

Eliminate empty elements from a list with a specific pattern

Crop image to path created in TikZ?

Where to refill my bottle in India?

Manga about a female worker who got dragged into another world together with this high school girl and she was just told she's not needed anymore

Wild Shape Centaur Into a Giant Elk: do their Charges stack?

Mapping arrows in commutative diagrams

Was there ever an axiom rendered a theorem?

Check if two datetimes are between two others

Input two commands to a new terminal?

What do you call something that goes against the spirit of the law, but is legal when interpreting the law to the letter?

Why airport relocation isn't done gradually?

What is the command to reset a PC without deleting any files

Are objects structures and/or vice versa?

Patience, young "Padovan"

Why is the design of haulage companies so “special”?

Prime joint compound before latex paint?

Can I find out the caloric content of bread by dehydrating it?



Duty of care dilemma when reporting Web vulnerabilities to both Stakeholders and Web Service owner


Is it “wrong” to copy a photo from an article (with photographers name and link to article) on the web and tweet it?Which country's laws apply to buying/selling illegal items? Buyer, seller or owner of the service?Actionability of web site terms of serviceWhen is making and selling “snake oil” illegal?Child Custody : Cases supporting Father as primary care giver or shared care and controlHow do I file a certificate of service when making a money claim online?Does a parent have any heightened duty of care to a grown child?Which country's law applies when scraping / crawling web pages?Does my employer have to pay redundancy when my contract takes me over two years service?Removing negligent care clause from service agreement













0















Ok I am going to ask this question with an Analogy.
A Locksmith is walking in street and comes across a door. The door seems to be well secured to a normal user and is actually a door to safe deposit vault/ stock exchange etc etc. The locksmith notices something unusual the Locksmith has a account (but no safe deposit) himself in the bank. Concerned the locksmith waits and see unusual activity like people who don't look like bank employees loitering around the door. He also observes that the security is so bad that it might be deliberate ignorance.
Also the Locksmith is a convicted (Ex CatBurglar) so him observing and reporting this can give wrong signal to authorities.



Another analogy to this is an ex/reformed "Some Amateur Troll" observed "Some Country X Trolls" on a "Big Network" but can't point fingers and also cannot approach both cause he legally cannot prove "X Trolls" activity benefits/collusion/ignorance "Big Network".



How does he inform stakeholders legally?










share|improve this question









New contributor




Flood Gravemind is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.




















  • So basically you noticed someone trying to hack a large network?

    – Putvi
    13 mins ago















0















Ok I am going to ask this question with an Analogy.
A Locksmith is walking in street and comes across a door. The door seems to be well secured to a normal user and is actually a door to safe deposit vault/ stock exchange etc etc. The locksmith notices something unusual the Locksmith has a account (but no safe deposit) himself in the bank. Concerned the locksmith waits and see unusual activity like people who don't look like bank employees loitering around the door. He also observes that the security is so bad that it might be deliberate ignorance.
Also the Locksmith is a convicted (Ex CatBurglar) so him observing and reporting this can give wrong signal to authorities.



Another analogy to this is an ex/reformed "Some Amateur Troll" observed "Some Country X Trolls" on a "Big Network" but can't point fingers and also cannot approach both cause he legally cannot prove "X Trolls" activity benefits/collusion/ignorance "Big Network".



How does he inform stakeholders legally?










share|improve this question









New contributor




Flood Gravemind is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.




















  • So basically you noticed someone trying to hack a large network?

    – Putvi
    13 mins ago













0












0








0








Ok I am going to ask this question with an Analogy.
A Locksmith is walking in street and comes across a door. The door seems to be well secured to a normal user and is actually a door to safe deposit vault/ stock exchange etc etc. The locksmith notices something unusual the Locksmith has a account (but no safe deposit) himself in the bank. Concerned the locksmith waits and see unusual activity like people who don't look like bank employees loitering around the door. He also observes that the security is so bad that it might be deliberate ignorance.
Also the Locksmith is a convicted (Ex CatBurglar) so him observing and reporting this can give wrong signal to authorities.



Another analogy to this is an ex/reformed "Some Amateur Troll" observed "Some Country X Trolls" on a "Big Network" but can't point fingers and also cannot approach both cause he legally cannot prove "X Trolls" activity benefits/collusion/ignorance "Big Network".



How does he inform stakeholders legally?










share|improve this question









New contributor




Flood Gravemind is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.












Ok I am going to ask this question with an Analogy.
A Locksmith is walking in street and comes across a door. The door seems to be well secured to a normal user and is actually a door to safe deposit vault/ stock exchange etc etc. The locksmith notices something unusual the Locksmith has a account (but no safe deposit) himself in the bank. Concerned the locksmith waits and see unusual activity like people who don't look like bank employees loitering around the door. He also observes that the security is so bad that it might be deliberate ignorance.
Also the Locksmith is a convicted (Ex CatBurglar) so him observing and reporting this can give wrong signal to authorities.



Another analogy to this is an ex/reformed "Some Amateur Troll" observed "Some Country X Trolls" on a "Big Network" but can't point fingers and also cannot approach both cause he legally cannot prove "X Trolls" activity benefits/collusion/ignorance "Big Network".



How does he inform stakeholders legally?







united-kingdom internet civil-law ethical-hacking






share|improve this question









New contributor




Flood Gravemind is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.











share|improve this question









New contributor




Flood Gravemind is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









share|improve this question




share|improve this question








edited 6 mins ago







Flood Gravemind













New contributor




Flood Gravemind is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









asked 15 mins ago









Flood GravemindFlood Gravemind

1011




1011




New contributor




Flood Gravemind is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.





New contributor





Flood Gravemind is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.






Flood Gravemind is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.












  • So basically you noticed someone trying to hack a large network?

    – Putvi
    13 mins ago

















  • So basically you noticed someone trying to hack a large network?

    – Putvi
    13 mins ago
















So basically you noticed someone trying to hack a large network?

– Putvi
13 mins ago





So basically you noticed someone trying to hack a large network?

– Putvi
13 mins ago










0






active

oldest

votes












Your Answer








StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "617"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
noCode: true, onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);






Flood Gravemind is a new contributor. Be nice, and check out our Code of Conduct.









draft saved

draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2flaw.stackexchange.com%2fquestions%2f38925%2fduty-of-care-dilemma-when-reporting-web-vulnerabilities-to-both-stakeholders-and%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown

























0






active

oldest

votes








0






active

oldest

votes









active

oldest

votes






active

oldest

votes








Flood Gravemind is a new contributor. Be nice, and check out our Code of Conduct.









draft saved

draft discarded


















Flood Gravemind is a new contributor. Be nice, and check out our Code of Conduct.












Flood Gravemind is a new contributor. Be nice, and check out our Code of Conduct.











Flood Gravemind is a new contributor. Be nice, and check out our Code of Conduct.














Thanks for contributing an answer to Law Stack Exchange!


  • Please be sure to answer the question. Provide details and share your research!

But avoid


  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.

To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2flaw.stackexchange.com%2fquestions%2f38925%2fduty-of-care-dilemma-when-reporting-web-vulnerabilities-to-both-stakeholders-and%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Are there any AGPL-style licences that require source code modifications to be public? Planned maintenance scheduled April 23, 2019 at 23:30 UTC (7:30pm US/Eastern) Announcing the arrival of Valued Associate #679: Cesar Manara Unicorn Meta Zoo #1: Why another podcast?Force derivative works to be publicAre there any GPL like licenses for Apple App Store?Do you violate the GPL if you provide source code that cannot be compiled?GPL - is it distribution to use libraries in an appliance loaned to customers?Distributing App for free which uses GPL'ed codeModifications of server software under GPL, with web/CLI interfaceDoes using an AGPLv3-licensed library prevent me from dual-licensing my own source code?Can I publish only select code under GPLv3 from a private project?Is there published precedent regarding the scope of covered work that uses AGPL software?If MIT licensed code links to GPL licensed code what should be the license of the resulting binary program?If I use a public API endpoint that has its source code licensed under AGPL in my app, do I need to disclose my source?

2013 GY136 Descoberta | Órbita | Referências Menu de navegação«List Of Centaurs and Scattered-Disk Objects»«List of Known Trans-Neptunian Objects»

Button changing it's text & action. Good or terrible? The 2019 Stack Overflow Developer Survey Results Are Inchanging text on user mouseoverShould certain functions be “hard to find” for powerusers to discover?Custom liking function - do I need user login?Using different checkbox style for different checkbox behaviorBest Practices: Save and Exit in Software UIInteraction with remote validated formMore efficient UI to progress the user through a complicated process?Designing a popup notice for a gameShould bulk-editing functions be hidden until a table row is selected, or is there a better solution?Is it bad practice to disable (replace) the context menu?