All articles tagged with legal
The AI industry says anyone can ship code now. What they don't say: you're legally responsible for every security hole the AI creates, even if you can't read the code it wrote. Courts don't care that Claude scaffolded your auth system. If it leaks PII, you're liable.
Yannick Dixken found a critical vulnerability exposing divers' personal data. The organization's response? Legal threats and an NDA demand. Eight months later, users still haven't been notified. This is why responsible disclosure is dying.
Yannick Dixken responsibly disclosed a critical vulnerability exposing minors' data at a diving org. Their response? Legal threats, NDAs, and eight months of silence about user notifications. This is why we can't have nice things in security disclosure.