{"guid":"ed10b9a1-8d52-529d-b81b-5c8e2f0547d2","title":"Reporting vulnerabilities in Belgium","subtitle":null,"slug":"why2025-289-reporting-vulnerabilities-in-belgium","link":"https://program.why2025.org/why2025/talk/3R8JLD/","description":"How noticing a vulnerability in a website has led to a foreign government threatening to revoke my permission to publicly discuss the existence of an abstract vulnerability class.\n\nBelgium has laws regulating the reporting and public disclosure of vulnerabilities. While the goal is to protect both organisations and reporters of vulnerabilities, the assumptions behind it conflict with the practice of coordinated vulnerability disclosure. I will discuss the parts of my experience I’m allowed to tell.\n\nLicensed to the public under https://creativecommons.org/licenses/by/4.0/","original_language":"eng","persons":["floort"],"tags":["289","2025","why2025","Yearn for a better future","Andromeda","why2025-eng","Day 3"],"view_count":186,"promoted":false,"date":"2025-08-09T20:00:00.000+02:00","release_date":"2025-08-10T00:00:00.000+02:00","updated_at":"2026-03-29T12:00:05.756+02:00","length":2855,"duration":2855,"thumb_url":"https://static.media.ccc.de/media/events/why2025/289-ed10b9a1-8d52-529d-b81b-5c8e2f0547d2.jpg","poster_url":"https://static.media.ccc.de/media/events/why2025/289-ed10b9a1-8d52-529d-b81b-5c8e2f0547d2_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/why2025/289-ed10b9a1-8d52-529d-b81b-5c8e2f0547d2.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/why2025/289-ed10b9a1-8d52-529d-b81b-5c8e2f0547d2.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/why2025-289-reporting-vulnerabilities-in-belgium","url":"https://api.media.ccc.de/public/events/ed10b9a1-8d52-529d-b81b-5c8e2f0547d2","conference_title":"What Hackers Yearn 2025","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025","related":[],"recordings":[{"size":477,"length":2855,"mime_type":"video/webm;codecs=av01","language":"eng","filename":"why2025-289-eng-Reporting_vulnerabilities_in_Belgium_av1-hd.webm","state":"new","folder":"av1-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2025-08-10T21:32:03.186+02:00","recording_url":"https://cdn.media.ccc.de/events/why2025/av1-hd/why2025-289-eng-Reporting_vulnerabilities_in_Belgium_av1-hd.webm","url":"https://api.media.ccc.de/public/recordings/89283","event_url":"https://api.media.ccc.de/public/events/ed10b9a1-8d52-529d-b81b-5c8e2f0547d2","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"},{"size":43,"length":2855,"mime_type":"audio/mpeg","language":"eng","filename":"why2025-289-eng-Reporting_vulnerabilities_in_Belgium_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2025-08-10T20:44:39.918+02:00","recording_url":"https://cdn.media.ccc.de/events/why2025/mp3/why2025-289-eng-Reporting_vulnerabilities_in_Belgium_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/89268","event_url":"https://api.media.ccc.de/public/events/ed10b9a1-8d52-529d-b81b-5c8e2f0547d2","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"},{"size":27,"length":2855,"mime_type":"audio/opus","language":"eng","filename":"why2025-289-eng-Reporting_vulnerabilities_in_Belgium_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2025-08-10T20:44:35.757+02:00","recording_url":"https://cdn.media.ccc.de/events/why2025/opus/why2025-289-eng-Reporting_vulnerabilities_in_Belgium_opus.opus","url":"https://api.media.ccc.de/public/recordings/89267","event_url":"https://api.media.ccc.de/public/events/ed10b9a1-8d52-529d-b81b-5c8e2f0547d2","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"},{"size":559,"length":2855,"mime_type":"video/webm","language":"eng","filename":"why2025-289-eng-Reporting_vulnerabilities_in_Belgium_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2025-08-10T22:01:50.479+02:00","recording_url":"https://cdn.media.ccc.de/events/why2025/webm-hd/why2025-289-eng-Reporting_vulnerabilities_in_Belgium_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/89288","event_url":"https://api.media.ccc.de/public/events/ed10b9a1-8d52-529d-b81b-5c8e2f0547d2","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"},{"size":141,"length":2855,"mime_type":"video/webm","language":"eng","filename":"why2025-289-eng-Reporting_vulnerabilities_in_Belgium_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2025-08-10T21:32:55.948+02:00","recording_url":"https://cdn.media.ccc.de/events/why2025/webm-sd/why2025-289-eng-Reporting_vulnerabilities_in_Belgium_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/89284","event_url":"https://api.media.ccc.de/public/events/ed10b9a1-8d52-529d-b81b-5c8e2f0547d2","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"},{"size":154,"length":2855,"mime_type":"video/mp4","language":"eng","filename":"why2025-289-eng-Reporting_vulnerabilities_in_Belgium_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2025-08-10T20:50:00.289+02:00","recording_url":"https://cdn.media.ccc.de/events/why2025/h264-sd/why2025-289-eng-Reporting_vulnerabilities_in_Belgium_sd.mp4","url":"https://api.media.ccc.de/public/recordings/89275","event_url":"https://api.media.ccc.de/public/events/ed10b9a1-8d52-529d-b81b-5c8e2f0547d2","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"},{"size":619,"length":2855,"mime_type":"video/mp4","language":"eng","filename":"why2025-289-eng-Reporting_vulnerabilities_in_Belgium_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2025-08-10T20:41:28.142+02:00","recording_url":"https://cdn.media.ccc.de/events/why2025/h264-hd/why2025-289-eng-Reporting_vulnerabilities_in_Belgium_hd.mp4","url":"https://api.media.ccc.de/public/recordings/89262","event_url":"https://api.media.ccc.de/public/events/ed10b9a1-8d52-529d-b81b-5c8e2f0547d2","conference_url":"https://api.media.ccc.de/public/conferences/WHY2025"}]}