39 ms·
What is a good way to implement responsible disclosure for single developer / side projects? Eg, when you don't have the resources to pay for bug bounties etc.
by tarr11 9y ago
What is a good way to implement responsible disclosure for single developer / side projects?
Eg, when you don't have the resources to pay for bug bounties etc.
- hdhzy 9y agoWell the article has one potential answer, create a page just like Tesla: https://www.tesla.com/about/legal#security-vulnerability-reporting-policy https://www.tesla.com/about/legal#security-vulnerability-rep...
- yjftsjthsd-h 9y agoA page that asks for you to give them your real name and promises to not take legal action against you only if you follow very specific rules that could be violated by accident? I wouldn't report to them like that; they've left enough rope to hang you with.