> On the next screen I just hit the connect button to see what would happen:
> Not really sure what it does, but I found several Droisys e-mail addresses in the database and decided to mail them that their database was exposed on the internet.
Oh man, this is a bad idea.
If you find something out there that you think you can connect to - poor password, no password, etc - you must be very careful.
In some cases, just reporting it will cause you problems. At this point, you probably haven't broken the law but some companies are just jackasses.
But once you connect, the game changes. It is "unauthorized access" and it's probable that you broke your local laws. At that point, it's not just a jackass company that gets involved, it's local law enforcement too.
And then you get data from the database. It's probably going to get even worse for you.
When you go a step further and share a howto on the web... this is a bad idea all around.
This is not proper disclosure. If I was him, I'd get a good lawyer.
> Not really sure what it does, but I found several Droisys e-mail addresses in the database and decided to mail them that their database was exposed on the internet.
Oh man, this is a bad idea.
If you find something out there that you think you can connect to - poor password, no password, etc - you must be very careful.
In some cases, just reporting it will cause you problems. At this point, you probably haven't broken the law but some companies are just jackasses.
But once you connect, the game changes. It is "unauthorized access" and it's probable that you broke your local laws. At that point, it's not just a jackass company that gets involved, it's local law enforcement too.
And then you get data from the database. It's probably going to get even worse for you.
When you go a step further and share a howto on the web... this is a bad idea all around.
This is not proper disclosure. If I was him, I'd get a good lawyer.