3 ms·
I'd like to see a service where a company's source code/database/confidential info is placed in escrow pending the payout from a bug bounty. Or, perhaps more li
by ianhawes 11y ago
I'd like to see a service where a company's source code/database/confidential info is placed in escrow pending the payout from a bug bounty. Or, perhaps more likely, some sort of 3rd-party arbitration.
- Mandatum 11y agoGood luck finding an escrow to not only trust, but would be willing to take the heat for that one. To be a trustworthy escrow, you must have a good reputation or track-record. There's near no anonymous escrows that could provide a service trustworthy enough to handle this. And going the non-anonymous route would be near impossible, Facebook would litigate an entire country over this.