I found a vulnerability in my campus, should I report it?
I didn’t pentest anything I wasn’t allowed to (just client side stuff), and basically it would be easy to dump all email/name pairs of the people housed in my campus. The vulnerability sits in a mobile app used to take food from vending machines, shoul…