You are generally not going to be legally liable for things you do in ordinary s...

		tptacek on Sept 13, 2024 \| parent \| context \| favorite \| on: Zero-Click Calendar invite vulnerability chain in ... You are generally not going to be legally liable for things you do in ordinary security research, but you will sure as hell be liable if you do unauthorized serverside research. Apple bounty stories are invariably about clientside work with little to no legal risk.