[mig4ng]

Hello,
I've not been very active on the forum, when I come here I just see the new posts and I don't even comment anymore, I guess I got to restart my active duty in the forums, but bullshit aside I have a philosophical question about "hacking" if I can call it that.
Lets hypothetical say that I found a glitch or a fail in security of a payment system in a website like ebay, that allows me to purchase things that cost $30 for about $0.60 because they didn't configured their paypal and credit card payment properly (it's not via SQLi and no I'm not using others people money) and I can just underpay a lot for any product in that store.

My question isn't if it is correct to use it, of course it isn't, the real question here is, if I hypothetically found a bug like this, is it a crime/illegal to purchase items using this "bug/glitch".

Share your opinion.

[Nyx]

Hm. I think it wouldn't go against law because you used the website and paid the price that the website demanded from you, but they might try and call you on theft.

[Rye123]

Should not be illegal, the owners scripted it that way, it's their fault.

[Inori]

I'd wouldn't say that it's illegal, but I'd report it to the site's owners after using it a few times in case they find it on their own later and see that you've been using it

[Crypt]

Should not be illegal, the owners scripted it that way, it's their fault.

That's an idiotic and flawed logic. That's like saying it's not illegal to hack a website because the person who coded it had an vulnerability in the way he coded it.

@OP if it requires any sort of tampering with the website or requests, it's illegal. Otherwise SQLi, RCE, XSS, CSRF, and everything else would be legal.

[roger_smith]

Hello,
I've not been very active on the forum, when I come here I just see the new posts and I don't even comment anymore, I guess I got to restart my active duty in the forums, but bullshit aside I have a philosophical question about "hacking" if I can call it that.
Lets hypothetical say that I found a glitch or a fail in security of a payment system in a website like ebay, that allows me to purchase things that cost $30 for about $0.60 because they didn't configured their paypal and credit card payment properly (it's not via SQLi and no I'm not using others people money) and I can just underpay a lot for any product in that store.

My question isn't if it is correct to use it, of course it isn't, the real question here is, if I hypothetically found a bug like this, is it a crime/illegal to purchase items using this "bug/glitch".

Share your opinion.

@Nothing.nobody beat me to it, but yes it's completely illegal. At minimum I'm sure you could be charged under the CFAA of '86

http://en.wikipedia.org/wiki/Computer_Fr..._Abuse_Act

[mig4ng]

Thanks for the answers I guess I'll just warn the webmaster about the bug then, maybe he gets me some voucher or something to buy stuff on their site

[roger_smith]

Hey man, you're right. I never even thought of it like that. You have a good point. You should go take a bike that's not locked up. It was their fault that they didn't lock it up, right? I mean now that I think about it, what were they expecting?

They probably left it there unlocked in case someone wanted to take it and use it. What a wonderful and caring person to leave their bike like that.

[Th3PonyWizard]

how stoopid can people be
if you malform input and gain any favor from it = it is illegal

[ねこまっしぐら]

how stoopid can people be
if you malform input and gain any favor from it = it is illegal

Nicely said. Well put.