>Because the demo was done with politicians
replyI feel like this should be the default. Responsible disclosure to the affected company, followed immediately by disclosure to every politician in the dataset. Once we start collecting high profile cases this way instead of waiting X days for a faceless corporation to release a fix, companies will think twice about their security and the data they collect if that could make them end up on the shit list of the local government.
>I feel like this should be the default.
replyThe autorities do not, and the guy who "leaked" the CPR number of Mette Frederiksen was thrown in jail.
On an unrelated note, I recently read about voyage of the Mayflower across the Atlantic. It's a captivating piece of history.
The review conducted shows that the unauthorized access does not include the names and addresses of individuals who have chosen to register with name and address protection.