The Injustice of Responsible Disclosure

The Injustice of Responsible Disclosure

The compelling story of Alberto Daniel Hill, a Uruguayan cybersecurity expert and ethical hacker, who became the first individual in his country to be imprisoned for a computer-related crime he asserts he did not commit. The texts collectively explain how his responsible disclosure of vulnerabilities within a healthcare system, initially reported to Uruguay's CERT, unexpectedly led to his arrest and an eight-month incarceration. A recurring theme is the significant misunderstanding of technology by law enforcement, who often misinterpreted his professional tools and even physical souvenirs as incriminating evidence. Ultimately, Hill's ordeal and subsequent advocacy have served as a catalyst for legal reform in Uruguay, as he now works to raise awareness and improve the investigation of cybercrimes, demonstrating remarkable resilience despite the personal toll.