4 ms·
So let's suppose I'm a clever computer guy and I enjoy finding out how systems work and don't work, and I uncover lots of security problems. But I'm also lazy
by saalweachter 10y ago
So let's suppose I'm a clever computer guy and I enjoy finding out how systems work and don't work, and I uncover lots of security problems.
But I'm also lazy and/or not very good at dealing with large corporations to find the right person to report these things to, even if they have a bug bounty.
Are there any organizations -- uhh, non-criminal organizations -- that will take a security report, find the right person at the company to report it to, see that it is addressed, and maintain my anonymity, so that I can wash my hands of it and go back to what I prefer to do with my time?
- y4mi 10y agothat sounds like a nice idea! but just imagine such a thing to exist... they'd need to document these security holes so that the same bug isn't reported several times simultaniously. so, they'll have a database of security holes a documented way to break into them... this would be more than just a honeypot for every black-hat hacker out there. they'd be swarming them
- wlonkly 10y agoJournalists are the first that come to mind. Use Secure Drop to maintain anonymity.