Danish supplier of national software reports good citizen to the police

From KMD er farlig for IT-sikkerheden i Danmark and Fandt hul i sikkerheden hos it-kæmpe – nu er han politianmeldt:

  • KMD programmed the application in question.
  • Frederiksberg county uses this application.
  • Esben Warming Pedersen uses this application as a private citizen for a valid reason. (Esben works with security in the daytime.)
  • Esben discovers, that when he types in a valid personal identification number, information related to that number appears (name).
  • Esben shared this discovery with Frederiksberg county. After the bug was fixed, he also shared it with a national television station. No sensitive information was shared on tv.
  • The functionality with the bug is approximately 12 years old.
  • The reaction of KMD after the tv program, was to call the police and report Esben for hacking.

Skriv en kommentar