Stories
Slash Boxes
Comments

SoylentNews is people

posted by Fnord666 on Tuesday April 07 2020, @07:29AM   Printer-friendly
from the shush-your-mouth dept.

Arthur T Knackerbracket has found the following story:

Used properly, bug bounty platforms connect security researchers with organizations wanting extra scrutiny. In exchange for reporting a security flaw, the researcher receives payment (a bounty) as a thank you for doing the right thing. However, CSO's investigation shows that the bug bounty platforms have turned bug reporting and disclosure on its head, what multiple expert sources, including HackerOne's former chief policy officer, Katie Moussouris, call a "perversion."

Silence is the commodity the market appears to be demanding, and the bug bounty platforms have pivoted to sell what willing buyers want to pay for.

"Bug bounties are best when transparent and open. The more you try to close them down and place NDAs on them, the less effective they are, the more they become about marketing rather than security," Robert Graham of Errata Security tells CSO.

Leitschuh, the Zoom bug finder, agrees. "This is part of the problem with the bug bounty platforms as they are right now. They aren't holding companies to a 90-day disclosure deadline," he says. "A lot of these programs are structured on this idea of non-disclosure. What I end up feeling like is that they are trying to buy researcher silence."


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 0, Offtopic) by aristarchus on Tuesday April 07 2020, @07:58AM (9 children)

    by aristarchus (2645) on Tuesday April 07 2020, @07:58AM (#979912) Journal

    Six out of ten submissions in the Hold are aristarchus submissions. And the Eds pretend to be gathering for a merge, rather than silencing an original Soylentil? Oh, the Huge Manatee! Oh, Mores, and Tempora!. Sorry for the offtopic post, but no one is here anymore besides Runaway, and he is an uneducated redneck yellowbellied hillbilly Trump supporter, kind of a Trump jockstrap, that you use for a Covid19 Mask. That is, if you cannot get your hands on some of the cloroxoxycremequinine that Sean Innanity is selling. Pfft.

    Starting Score:    1  point
    Moderation   -2  
       Offtopic=2, Total=2
    Extra 'Offtopic' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   0  
  • (Score: 0, Offtopic) by aristarchus on Tuesday April 07 2020, @09:38AM (3 children)

    by aristarchus (2645) on Tuesday April 07 2020, @09:38AM (#979924) Journal

    And, like wow! Instantly hidden, to die a grim death in the bowels of soylentnews. But there is hope. A slim flicker of the original commitment to free speech, not just to alt-right and racist and libertariantard speech, still burns at SoylentNews. I am aristarchus, and I am here to speak freely. I request you join me.

    • (Score: 3, Touché) by maxwell demon on Tuesday April 07 2020, @10:16AM (1 child)

      by maxwell demon (1608) on Tuesday April 07 2020, @10:16AM (#979930) Journal

      Well, the code is open source, so you might just set up aristarchusnews.org as alternative site.

      --
      The Tao of math: The numbers you can count are not the real numbers.
      • (Score: 2, Insightful) by inertnet on Tuesday April 07 2020, @11:33AM

        by inertnet (4071) on Tuesday April 07 2020, @11:33AM (#979935) Journal

        Make that aristarchuspoliticalnews.org

        So people not particularly interested in politics, genders or skin colors don't need to go there.

    • (Score: -1, Flamebait) by Ethanol-fueled on Tuesday April 07 2020, @10:51AM

      by Ethanol-fueled (2792) on Tuesday April 07 2020, @10:51AM (#979933) Homepage

      Niggers. Niggers hanging at the park because they won't believe what Whitey says. Now that is awesome. You must be a nigger to prepare yourself. Are you prepared to be a true nigger?

  • (Score: -1, Offtopic) by Anonymous Coward on Tuesday April 07 2020, @01:32PM

    by Anonymous Coward on Tuesday April 07 2020, @01:32PM (#979953)

    Wow, you sound like you have about as much of a victim complex as Trump.

  • (Score: 2) by jmichaelhudsondotnet on Tuesday April 07 2020, @02:03PM

    by jmichaelhudsondotnet (8122) on Tuesday April 07 2020, @02:03PM (#979959) Journal

    I drove them away by pointing out there was no one here willing to say real shit, and that the major posters were clearly shills.

    Better silence than a shill farm barking at each other.

    But I noticed that too. Why care about a community and an idea when it is so easily subverted.

    It is however nice to know I wont be censored, but if anyone believes what I am saying, and I believe they do, they are right to not post here with their real names.

    It is too late for me, I can have no anonymity, I am committed to public interest work, and have been on the lists for 20 years getting f'd with, and to this very day.

    The number of positively human responses I have received in the year I have ben posting here I can count on my fingers, and they have all been anons. Fusta demonstrated he can read my private email by mentioning a very specific old movie within 24 hours of the email I sent. He also demonstrated keen interest in a story from my high school days with a girlfriend that appeared and then disappeared out of my high school class. Real actual spooky stuff.

    Being followed is not fun. Especially without money and when no one believes you.

    check my new twitter, @decultification

  • (Score: 0) by Anonymous Coward on Tuesday April 07 2020, @05:27PM

    by Anonymous Coward on Tuesday April 07 2020, @05:27PM (#980017)

    Maybe this is a bug in the Soylent software. If you pay me some money, sort of like a bounty, I'll root it out.

  • (Score: 0) by Anonymous Coward on Tuesday April 07 2020, @10:30PM (1 child)

    by Anonymous Coward on Tuesday April 07 2020, @10:30PM (#980102)

    Seven of them are from this "upstart" guy. They must really hate him too.

    • (Score: 1, Offtopic) by aristarchus on Wednesday April 08 2020, @12:01AM

      by aristarchus (2645) on Wednesday April 08 2020, @12:01AM (#980138) Journal

      Only 2, now, versus 10 aristarchus subs. They hate upstart less, it seems.