• Hillock@feddit.de
    link
    fedilink
    arrow-up
    39
    arrow-down
    1
    ·
    9 months ago

    You should ban anyone who tries this regardless of the outcome. There is always a small chance they did it on purpose trying to cause damage. There is no benefit by giving them another chance, you just riks giving them the possibility of doing more damage. If the thing was a mistake, the person will learn from it and find another job.

    • Kühe sind toll@feddit.de
      link
      fedilink
      arrow-up
      26
      ·
      9 months ago

      If the task would have been to find general security risks this would have counted. I mean, he did some serious harm, but he was able to find a security issue.

      • bane_killgrind@lemmy.ml
        link
        fedilink
        English
        arrow-up
        4
        ·
        9 months ago

        I think there is kind of an assumption that the scenario is “outside host gains privileged access” so there’s not really a security issue with some attacker deleting root on their own box.

      • joel_feila@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        9 months ago

        Yeah so is tossing a molotov on thier machines, “found a security issue not firproofing everything”

    • Phoenixz@lemmy.ca
      link
      fedilink
      arrow-up
      2
      ·
      9 months ago

      We’ll I’m this case too, if true, the person didn’t know anything about the job they were aplyiyfor and tried to cheat their way into the company. Also not really great.