4 ms·
I am of the view that anyone who finds an exploit should (generally) do what they feel would have the best result. This would incentivize organisations to crea
by nickff 10y ago
I am of the view that anyone who finds an exploit should (generally) do what they feel would have the best result. This would incentivize organisations to create payouts (prizes) for non-public exploits, and it would allow concerned citizens to force a change from generally unmovable bureaucracies.
- uola 10y agoThis is just the latest justification among security people to not having acknowledge their own incompetency in things like risk management. Since when was "doing what you feel" considered a reasoned solution? Many times these things aren't even weaknesses as such, just loose tolerances in the system and exposing them under great fanfare just making the system less flexible. Which is pretty ironic if you think about it.