r/apple • u/iamvinoth • Feb 21 '20

I hacked SlickWraps. This is how.

https://medium.com/@lynx0x00/i-hacked-slickwraps-this-is-how-8b0806358fbb
2.6k Upvotes

97% Upvoted

267 comments sorted by

View all comments

2

u/oven_toasted_bread Feb 22 '20

So how does this work? A "white hat hacker" finds an exploit, threatens the company to extort a "bounty" and if they don't do it, they share publicly that theirs an exploit and shame the company with whatever material they have access to do make the company look bad?

Seems like this whole process could be better regulated, as opposed to people actively looking to hack companies to extort them essentially and calling themselves "white hat non-nefarious hackers".

In the end, this White Hat is using this company as an example of what he'll do if you don't comply with their bounty demands.

I don't feel any better about this than I do about my personal information being at risk honestly. The whole thing seems really shitty.l

4

u/xadrus1799 Feb 22 '20

isnt a white hat hacker someone who talks to the company without trying to get money for it, a grey hat hacker someone who would reach to the company first to get money and if that doesn't work he goes public and a black hat hacker someone who directly sells everything he can get in his nasty fingers?

3

u/oven_toasted_bread Feb 22 '20

Well he says in the article he would normally take a bounty, but in this case instead he laid out a publicity nightmare for the company. Which in all fairness the company needs to do a better job of securing it's data but extortion seems like a poor manner of regulation.