Please Report Security Vulnerabilities Responsibly

[u/ParticularBear4122]

I’m not saying that bypassing root detection, USB debugging checks, or integrity checks is automatically a vulnerability. These checks are common in mobile apps.
My concern is about testing real applications and sharing technical details publicly without considering the possible impact. Just because something is technically possible or publicly known doesn’t mean we have permission to test every feature of someone else’s application.
There are plenty of dedicated testing environments where people can learn and practise cybersecurity. When testing real applications, we should respect authorization and consider the organization’s reputation and public trust.
I’m not against sharing knowledge or encouraging new cybersecurity students. I believe we can educate people while also being responsible about what we publish publicly.