Anyone read hacker quarterly 2600? I picked up an issue at Microcenter and it's very interesting. A lot of the articles walk a fine line of being ethical and unethical. However, It is a very fun read.
2600 NEWS: SPRING ISSUE OF 2600 RELEASED
So far my favorite article was the help desk guy that tested his employer’s website security with a cross site scripting tool. Supposedly, someone told him that the site wasn't secure. He some exposed vulnerabilities, but he almost lost his job in the process. Towards the end of the article he mentions how the senior techs said instead of testing for vulnerabilities, he should of just submitted a ticket. Also, after the senior techs found out about the vulnerabilities the site was still unsecure.