4 ms·
> So, we involved the BBC who helped us get their attention. Mitsubishi have since been very responsive to us! They are taking the issue very seriously at the h
by ju-st 10y ago
> So, we involved the BBC who helped us get their attention. Mitsubishi have since been very responsive to us! They are taking the issue very seriously at the highest levels.
So Mitsubishi apparently has no business process for reporting security issues but they are aware that security is important!
- csours 10y agoDISCLAIMER: I work for GM. I was shocked to read that GM was the second major (first if you don't count Tesla as major) automaker to set up a responsible disclosure program. [1] 1. http://arstechnica.com/security/2016/01/gm-embraces-white-hats-with-public-vulnerability-disclosure-program/ http://arstechnica.com/security/2016/01/gm-embraces-white-ha...
- vvanders 10y agoExcept that GM pays zero dollars for their bug bounties, unlike Tesla: https://bugcrowd.com/tesla https://bugcrowd.com/tesla
- csours 10y agoCan you find me Toyota's bug bounty or responsible disclosure page? BMW? Mercedes? Ford? Any other major OEM? I know that GM has done many bad things and done many things badly in the past, but it does seem that an old dog can learn new tricks.
- tobltobs 10y agoBounties not involving any compensation are indeed a kind of new trick.