> Nothing neathack did was illegal, taking it at face value, of course.
Law varies significantly between jurisdictions. You're just blankly claiming it's not illegal. People have been convicted for way less than this, in different countries.
Plus, you could be creating more damages to the company by downloading more data like this, and you're not wearing a white hat when you're creating damage. A white-hat is in and out, without creating damage, with a clean report about the issue so the software provider can patch it.
Law varies significantly between jurisdictions. You're just blankly claiming it's not illegal. People have been convicted for way less than this, in different countries.
Plus, you could be creating more damages to the company by downloading more data like this, and you're not wearing a white hat when you're creating damage. A white-hat is in and out, without creating damage, with a clean report about the issue so the software provider can patch it.
What are you talking about? Which data? Is this data in the room with us right now?
Pen testers here must be diligent about having a signed contract, or it is way too easy to end up in jail.
While the many posts may have been a bit excessive, jacquesm has a good point if you're looking at it through the lens of US law.
Never forget Aaron Swartz. [1]
[1] https://en.wikipedia.org/wiki/United_States_v._Swartz