3 ms·
On the flip side, such a vulnerability repository may not have incentives aligned with either the bug reporter or the software owner. See https://palant.de/201
by bzbarsky 9y ago
On the flip side, such a vulnerability repository may not have incentives aligned with either the bug reporter or the software owner. See https://palant.de/2017/10/04/observations-on-managed-bug-bounty-programs https://palant.de/2017/10/04/observations-on-managed-bug-bou... for a recent post about that sort of problem.