SoylentNews is people
SoylentNews
Arthur T Knackerbracket has found the following story:
Used properly, bug bounty platforms connect security researchers with organizations wanting extra scrutiny. In exchange for reporting a security flaw, the researcher receives payment (a bounty) as a thank you for doing the right thing. However, CSO's investigation shows that the bug bounty platforms have turned bug reporting and disclosure on its head, what multiple expert sources, including HackerOne's former chief policy officer, Katie Moussouris, call a "perversion."
Silence is the commodity the market appears to be demanding, and the bug bounty platforms have pivoted to sell what willing buyers want to pay for.
"Bug bounties are best when transparent and open. The more you try to close them down and place NDAs on them, the less effective they are, the more they become about marketing rather than security," Robert Graham of Errata Security tells CSO.
Leitschuh, the Zoom bug finder, agrees. "This is part of the problem with the bug bounty platforms as they are right now. They aren't holding companies to a 90-day disclosure deadline," he says. "A lot of these programs are structured on this idea of non-disclosure. What I end up feeling like is that they are trying to buy researcher silence."
(Score: 0, Offtopic) by aristarchus on Tuesday April 07 2020, @09:38AM (3 children)
And, like wow! Instantly hidden, to die a grim death in the bowels of soylentnews. But there is hope. A slim flicker of the original commitment to free speech, not just to alt-right and racist and libertariantard speech, still burns at SoylentNews. I am aristarchus, and I am here to speak freely. I request you join me.
(Score: 3, Touché) by maxwell demon on Tuesday April 07 2020, @10:16AM (1 child)
Well, the code is open source, so you might just set up aristarchusnews.org as alternative site.
The Tao of math: The numbers you can count are not the real numbers.
(Score: 2, Insightful) by inertnet on Tuesday April 07 2020, @11:33AM
Make that aristarchuspoliticalnews.org
So people not particularly interested in politics, genders or skin colors don't need to go there.
(Score: -1, Flamebait) by Ethanol-fueled on Tuesday April 07 2020, @10:51AM
Niggers. Niggers hanging at the park because they won't believe what Whitey says. Now that is awesome. You must be a nigger to prepare yourself. Are you prepared to be a true nigger?