{"guid":"ed10b9a1-8d52-529d-b81b-5c8e2f0547d2","title":"Reporting vulnerabilities in Belgium","subtitle":null,"slug":"why2025-289-reporting-vulnerabilities-in-belgium","link":"https://program.why2025.org/why2025/talk/3R8JLD/","description":"How noticing a vulnerability in a website has led to a foreign government threatening to revoke my permission to publicly discuss the existence of an abstract vulnerability class.\n\nBelgium has laws regulating the reporting and public disclosure of vulnerabilities. While the goal is to protect both organisations and reporters of vulnerabilities, the assumptions behind it conflict with the practice of coordinated vulnerability disclosure. I will discuss the parts of my experience I’m allowed to tell.\n\nLicensed to the public under https://creativecommons.org/licenses/by/4.0/","original_language":"eng","persons":["floort"],"view_count":190,"promoted":false,"date":"2025-08-09T20:00:00.000+02:00","release_date":"2025-08-10T00:00:00.000+02:00","updated_at":"2026-07-10T00:45:08.141+02:00","tags":["289","2025","why2025","Yearn for a better future","Andromeda","why2025-eng","Day 3"],"length":2855,"duration":2855,"thumb_url":"https://static.media.ccc.de/media/events/why2025/289-ed10b9a1-8d52-529d-b81b-5c8e2f0547d2.jpg","poster_url":"https://static.media.ccc.de/media/events/why2025/289-ed10b9a1-8d52-529d-b81b-5c8e2f0547d2_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/why2025/289-ed10b9a1-8d52-529d-b81b-5c8e2f0547d2.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/why2025/289-ed10b9a1-8d52-529d-b81b-5c8e2f0547d2.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/why2025-289-reporting-vulnerabilities-in-belgium","url":"https://api.media.ccc.de/public/events/ed10b9a1-8d52-529d-b81b-5c8e2f0547d2","conference_title":"What Hackers Yearn 2025","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025","related":[],"recordings":[{"length":2855,"mime_type":"video/mp4","language":"eng","filename":"why2025-289-eng-Reporting_vulnerabilities_in_Belgium_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2025-08-10T20:41:28.142+02:00","label":"eng 1080p","size":620,"recording_url":"https://cdn.media.ccc.de/events/why2025/h264-hd/why2025-289-eng-Reporting_vulnerabilities_in_Belgium_hd.mp4","url":"https://api.media.ccc.de/public/recordings/89262","event_url":"https://api.media.ccc.de/public/events/ed10b9a1-8d52-529d-b81b-5c8e2f0547d2","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"},{"length":2855,"mime_type":"video/mp4","language":"eng","filename":"why2025-289-eng-Reporting_vulnerabilities_in_Belgium_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2025-08-10T20:50:00.289+02:00","label":"eng 576p","size":155,"recording_url":"https://cdn.media.ccc.de/events/why2025/h264-sd/why2025-289-eng-Reporting_vulnerabilities_in_Belgium_sd.mp4","url":"https://api.media.ccc.de/public/recordings/89275","event_url":"https://api.media.ccc.de/public/events/ed10b9a1-8d52-529d-b81b-5c8e2f0547d2","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"},{"length":2855,"mime_type":"video/webm","language":"eng","filename":"why2025-289-eng-Reporting_vulnerabilities_in_Belgium_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2025-08-10T21:32:55.948+02:00","label":"eng 576p","size":141,"recording_url":"https://cdn.media.ccc.de/events/why2025/webm-sd/why2025-289-eng-Reporting_vulnerabilities_in_Belgium_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/89284","event_url":"https://api.media.ccc.de/public/events/ed10b9a1-8d52-529d-b81b-5c8e2f0547d2","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"},{"length":2855,"mime_type":"video/webm","language":"eng","filename":"why2025-289-eng-Reporting_vulnerabilities_in_Belgium_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2025-08-10T22:01:50.479+02:00","label":"eng 1080p","size":559,"recording_url":"https://cdn.media.ccc.de/events/why2025/webm-hd/why2025-289-eng-Reporting_vulnerabilities_in_Belgium_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/89288","event_url":"https://api.media.ccc.de/public/events/ed10b9a1-8d52-529d-b81b-5c8e2f0547d2","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"},{"length":2855,"mime_type":"video/webm;codecs=av01","language":"eng","filename":"why2025-289-eng-Reporting_vulnerabilities_in_Belgium_av1-hd.webm","state":"new","folder":"av1-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2025-08-10T21:32:03.186+02:00","label":"eng 1080p","size":478,"recording_url":"https://cdn.media.ccc.de/events/why2025/av1-hd/why2025-289-eng-Reporting_vulnerabilities_in_Belgium_av1-hd.webm","url":"https://api.media.ccc.de/public/recordings/89283","event_url":"https://api.media.ccc.de/public/events/ed10b9a1-8d52-529d-b81b-5c8e2f0547d2","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"},{"length":2855,"mime_type":"audio/opus","language":"eng","filename":"why2025-289-eng-Reporting_vulnerabilities_in_Belgium_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2025-08-10T20:44:35.757+02:00","label":"eng","size":28,"recording_url":"https://cdn.media.ccc.de/events/why2025/opus/why2025-289-eng-Reporting_vulnerabilities_in_Belgium_opus.opus","url":"https://api.media.ccc.de/public/recordings/89267","event_url":"https://api.media.ccc.de/public/events/ed10b9a1-8d52-529d-b81b-5c8e2f0547d2","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"},{"length":2855,"mime_type":"audio/mpeg","language":"eng","filename":"why2025-289-eng-Reporting_vulnerabilities_in_Belgium_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2025-08-10T20:44:39.918+02:00","label":"eng","size":44,"recording_url":"https://cdn.media.ccc.de/events/why2025/mp3/why2025-289-eng-Reporting_vulnerabilities_in_Belgium_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/89268","event_url":"https://api.media.ccc.de/public/events/ed10b9a1-8d52-529d-b81b-5c8e2f0547d2","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"}]}