IT consultant fined for daring to expose shoddy security

Spotting a plaintext password and using it in research without authorization deemed a crime

A security researcher in Germany has been fined €3,000 ($3,300, £2,600) for finding and reporting an e-commerce database vulnerability that was exposing almost 700,000 customer records.…

authorization commerce consultant crime customer database e-commerce expose exposing germany password plaintext records reporting research researcher security security researcher vulnerability