SoylentNews is people
SoylentNews
Arthur T Knackerbracket has found the following story:
Used properly, bug bounty platforms connect security researchers with organizations wanting extra scrutiny. In exchange for reporting a security flaw, the researcher receives payment (a bounty) as a thank you for doing the right thing. However, CSO's investigation shows that the bug bounty platforms have turned bug reporting and disclosure on its head, what multiple expert sources, including HackerOne's former chief policy officer, Katie Moussouris, call a "perversion."
Silence is the commodity the market appears to be demanding, and the bug bounty platforms have pivoted to sell what willing buyers want to pay for.
"Bug bounties are best when transparent and open. The more you try to close them down and place NDAs on them, the less effective they are, the more they become about marketing rather than security," Robert Graham of Errata Security tells CSO.
Leitschuh, the Zoom bug finder, agrees. "This is part of the problem with the bug bounty platforms as they are right now. They aren't holding companies to a 90-day disclosure deadline," he says. "A lot of these programs are structured on this idea of non-disclosure. What I end up feeling like is that they are trying to buy researcher silence."
(Score: 3, Interesting) by jmichaelhudsondotnet on Tuesday April 07 2020, @02:24PM (1 child)
If you want things that don't have a price, you have to have public interest people, and find a way to compensate them for their work.
I have written a literal ton of words here in the public interest, not a single .000001 btc for my efforts, and I am only called insane, nazi, etc etc etc.
People who are smart enough to know I am telling the truth are rightfully scared to be associated with me even by btc. I understand those people better than racebaiting shills and saarlacs like azumi. And psycho-semantic shadow trolls like "barbara hudson".
It is happening on twitter as we speak, "john michael" trended the day I made a new account.
And it is very much true that ecohackerfarm.org is a copshop entrapment setup, managed by an agent in an abusive psycho relationship with the owner of the property. Of course when she gets what she wants and invites more police here, she is so very happy. People who are not police, me, get called crazy for asking not to have 8 cell phones in operation at the diner table.
Otherwise it is very nice, but warn your friends all spaces like this that do not practice a very real security culture are just copshops.
@decultification but fml right, it is the end of reading, and maybe the end of people paying for books outside of the airport. And the end of common air travel, so....the 500 pages I self published this month and wrote over the last 2 years, plus everything I wrote here, and meme distribution, are effectively of 0 economic value despite 10,000+ page loads at my site every 2 weeks(not including google)
Really, I could never have imagined that not a single person would contribute to my work after this much. That is also maybe what people see when they come here, even someone who works his ass off and really contributes, gets nothing but shit.
Ill contribute while I can with my best ideas, but I will not be able to this rate for much longer, if you guys are so shitty and no one reads, then we should all move back into caves and start wearing leopard skins and believing skulls are gods, and throw everyone with an IQ over 90 into a flaming pit if they are not pro-zionism.
Well at least Jordan Peterson had to go to rehab and prove to everyone that his own ideas that he gets more than a mil a year for are completely ineffective even for his own self. That laugh right there was worth more money they every interaction here combined.
Excepting the many 5 rated things, that felt good of course.
But if everything has a price, the world is made of lies, and no one is safe, or someone has to start paying people and protecting people who are doing the work in the public interest. That there are so many rich people *not* doing this is enough evidence of their misvaluation of reality. The computer processor was not invented to shovel money up the power pyramid at a faster rate and identify every child at birth for lifelong tracking,
it was made to help humans think and communicate, or it was a complete waste of time so get out your leopardskins and stop trying to be smart at all whatsoever. At this rate that is what we will be forced to do anyway, and maybe this month, if any of the 15 competing rumor narratives turn out to be accurate. Not like any of us could verify aliens or a yellowstone eruption or meteor strike over the internet anyway.
Well, without public interest technologists that is. If that is not enough reason for any of you paycheck haulers to send me some coin or buy my books, so you know, you dont steal my work from me while you sit in your comfy chair in spookville or corporate towers. Maybe you don't understand the world at all outside of your javascript framework specialty, and so you should admit it.
Or fix the market with your lightning bolt. Or grow a pair and actually accuse me of being fake and not actually needing it, I welcome that scrutiny.
@decultification
https://leanpub.com/thebookoflongformremixmemes [leanpub.com] https://leanpub.com/mentalselfdefense
https://leanpub.com/expandeddefinitions [leanpub.com]
https://leanpub.com/fourparables [leanpub.com]
I admit I am not in the best of moods, working all the time while being poor, thrown out of places by anti-intellectual sociopathic government agents disguised as hippie mamas, while watching people who spew only garbage rake it in lying to people about virus and meteor news, just sucks, I hope you can understand.
But can you?
(Score: 0) by Anonymous Coward on Tuesday April 07 2020, @04:03PM
Ummm I don't get the joke...?