I'm not the person you're replying to, but I'm 41 and understand the notion of losing faith in the security world. I'm not losing faith with the profiteers beca

I'm not the person you're replying to, but I'm 41 and understand the notion of losing faith in the security world. I'm not losing faith with the profiteers because, if I look back at my career with open, honest eyes, I can see points where I was a profiteer and a detriment to the industry as a whole. Instead, I'm losing faith because it seems like the attacks keep getting more sophisticated, yet it's getting harder to operate as a white hat. I can't count how many times in the last year that I have suggested that researchers be incredibly careful about how they report bugs or if they should even report at all. Nor can I can count how many stories I've heard where white hats submit really juicy bugs, only to be screwed over on bounties, threatened with prosecution under the CFAA, or otherwise maligned. I can't believe that I can truthfully say this, but I feel like we have reached a point where being a white hat is too much trouble for too few potential rewards.