He helped disclose a vulnerability found by a student to a production website
using custom software, but ended up being quizzed by the police over how he
discovered the weakness.
The police, Meunier said, suspected that as he'd found one Achilles' Heel, he
may have found more but not reported them.
Writing
on his blog, he said that as a 'stubborn idealist' he clashed with a
detective by refusing to identify the student who had originally found the
problem.
He claims the police then threatened him with court orders and charging him
with felony counts, and that his university stood by and offered no support.
Meunier said his job was only saved by the student coming forward and talking to
the police.
Now he tells his students not to report any vulnerabilities on websites as it
is not worth the risk.
This article first appeared on sister
site the
Inquirer.
Chief Executive's Department ICT Manager Douglas Borough Council are looking for a motivated and accomplished person to provide primary ICT support for Douglas Corporation, user administration, and the development of our ICT infrastructure, systems and ... more >
Business Development Executive, Hertfordshire, £20,000-£22,000 per annum OTE £34 -36k The role: An exciting opportunity has become available within a prestigious organisation with aggressive growth plans. We are looking to recruit an office based Business ... more >
.NET Software Developer, £20,000 - £35,000 depending on experience About us Data Transparency is a small, rapidly growing company established in 2006 by an Oxford graduate. We create bespoke web-based data systems that are used in ... more >
New Cross, London, United Kingdom | Goldsmiths College
Systems and Development Support Officer, Up to £36,277 pa incl, New Cross, London Working within the Department of IT Services, you will be assisting in the management and development of our central server resources. This ... more >More job opportunities