Wrote them on Facebook one day and they tried to sue me
[1] https://blog.haschek.at/2019/threat-vector-legacy-static-web...
To them you'll likely seem like an overzealous geek that shouldn't mess with their business website. I've experienced this before myself and it's not particularly a good position to be in.
Their site has most likely been technically abandoned, i.e. no one capable is in charge anymore.
It'd be best to talk to the owner, show them your "hack" (change it to cats on your phone and let them verify in their browser) and offer them to fix it for free.
That's how one does these things in our small country. ;-)
but obviously that's not what happened
1. Telling them in person (they didn't understand)
2. Asking for the IT persons Phone number (they didn't give it to me)
3. Leaving my phone number and email (they never contacted me)
4. Notifying the austrian CERT (they never got an answer from the owner)
5. Notifying the press (standard.at posted an article about it, they didn't respond)
6. Writing them on Facebook (ob boy did they respond :D)
But since my first police raid I don't publish anything before letting my lawyer read it. He said if they do press charges they haven't got a chance since I have a paper trail of everything I did and didn't harm them or their site in any way
Warn them once and if they get hacked it's their problem. What's the proverb? You can lead a horse to water but you can't make it drink.
If I come up to you, the owner, and kindly warn you that your doors can easily be unlocked, your reaction would probably be a big thank you. But, I also understand that you are free to answer me to get the hell out of your lawn, because it's none of my business.
Sure I am doing it for your safety, for the safety of your kids, your wifes, and your valuables. I have no ulterior motives.
But, you have the right to not want to listen to all the ways an intruder can come to your house and steal all your stuff. You should have the right to find that information useless, and I don't have any say in that.
Now, warning all the town that your house is not secure enough to try to provoke an answer from you ? What do you think about that ? Really curious.
In the end it turned out that they didn't "not want to listen" the information just never got to the right person (internally) and I talked quite a bit with the owner (after understanding everything he even thanked me) and he said he never got a contact from CERT but I asked them and they said they wrote them twice.
What does "tried to sue" mean?
Did they file a suit? Did they threaten to sue but not follow through?