The article says “One could argue that their process was similar, in principle, to that of white-hat hacking: play around with software, find bugs, let the developers know.”. I’m not buying this crap; what the university of Minnesota did was closer to an adult randomly beating the neighbourhood’s kids, stealing their money, and then someone claiming “he’s teaching them self defence”. It is completely unethical and immoral.
I also think both Greg and Dolan were pushovers, trying to be reasonable and co-operative towards a clearly hostile entity. And, in the process, bringing guns to a sword fight:
submissions with a umn.edu address should not be “default” rejected; they should not be accepted at all. If you belong to a hostile entity you don’t get to put on your CV “I contriboot with OS projex”
Dolan’s demands boil down to “help us to fix your mess, don’t benefit from it, and ensure it won’t happen again”. That’s the bare minimum.
From the mailing list:
Note this is a rather old topic.
The article says “One could argue that their process was similar, in principle, to that of white-hat hacking: play around with software, find bugs, let the developers know.”. I’m not buying this crap; what the university of Minnesota did was closer to an adult randomly beating the neighbourhood’s kids, stealing their money, and then someone claiming “he’s teaching them self defence”. It is completely unethical and immoral.
I also think both Greg and Dolan were pushovers, trying to be reasonable and co-operative towards a clearly hostile entity. And, in the process, bringing guns to a sword fight: