Below are a collection of both old and new security or privacy incidents authored by our Privateers. We believe in Responsible Full Disclosure and generally follow the policy of the venerable RFP (Rain Forest Puppy), found here RFP Policy 2.0.   We believe that information security professionals should try to work with the vendor or agency in identifying and documenting any security or privacy incident found.   We also believe in working with both federal and state law enforcement agencies, where that applies.

/* Disclaimer:  Nothing in these reports are designed to identify any illegal or regulatory compliance issue.  Privateers do not hack into targets for fun, and do not hack into, run web app assessment software or perform penetration testing or vulnerability testing on any site or company without explicit permission and contracts from the responsible company */