Re: [Full-Disclosure] SPAM, credit card numbers, what would you do?

[Cael Abal <lists@onryou.com>]

> And as you can probably guess, orders.txt contains --
> ORDERS. Names, addresses, phone numbers, and CREDIT
> CARD NUMBERS. Dozens of them.
>
> So I got to thinking... what should I do here?

My suggestion?  Speak with a lawyer.

A number of 'hackers' recently in the news did their 'hacking' via web
browsers -- just like you.  It could likely be successfully argued by a
prosecutor that you intentionally stole this credit card data.  Yes, I
know it was a via clickable link and the site was ridiculously
unsecured, but that probably wouldn't make a difference to a court.

Anyhow, take care and good luck.

Cael

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html