The defense.gov story has much more detail than the phys.org version I was working from. http://phys.org/news/2016-06-hack-pentagon-reveals-flaws.html http://p

The defense.gov story has much more detail than the phys.org version I was working from. http://phys.org/news/2016-06-hack-pentagon-reveals-flaws.html http://phys.org/news/2016-06-hack-pentagon-reveals-flaws.htm... defense.gov: Starting this month, DoD is embarking on three follow-on initiatives. First, will be the development of a vulnerability disclosure process and policy for DoD so anyone with information about vulnerabilities in DoD systems, networks, applications, or websites can submit it to the department without fear of prosecution. Next will be the expansion of bug bounty programs to other DoD Components, in particular the Services, by developing a sustainable DoD-wide contract vehicle. Lastly, incentives will be included in our acquisition policies and guidance so that contractors practice greater transparency, and open their own systems for testing - especially DoD source code.